Cross site scripting

Cross-site scripting XSS vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or HTML via the "edit HTML source" option...

CVE-2014-8707

Cross-site scripting XSS vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or HTML via the "edit HTML source" option...

CVE-2014-8707

Summary: CVE-2014-8707 is a cross-site scripting (XSS) vulnerability in TinyMCE within Pluck CMS version 4.7.2. The flaw allows remote authenticated users to inject arbitrary script/HTML via the TinyMCE “edit HTML source” option. The connected CNVD entry for Pluck CMS confirms a TinyMCE XSS issue...

Fedora Update for tinymce FEDORA-2016-8d8d7d6d47

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 25 Update: tinymce-4.5.1-1.fc25

TinyMCE is a platform independent web based Javascript HTML WYSIWYG editor control released as by Moxiecode Systems AB. It has the ability to convert HTML TEXTAREA fields or other HTML elements to editor instances. TinyMCE is very easy to integrate into other CMS systems...

Fedora 25 : tinymce (2016-8d8d7d6d47)

Update to 4.5.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

TinyMCE v3.2.x <= (AuthBypass/ShellUpload) Multiple Vulnerabilites

No description provided by source...

WordPress mb.miniAudioPlayer Plugin <= 1.4.2 - Unspecified Vulnerability

This plugin is prone to a TinyMCE Popup unspecified issue. Solution Update the plugin...

WordPress TinyMCE Plugin <= 3.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

WordPress TinyMCE Plugin <= 3.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

CVE-2012-0984

Multiple cross-site scripting XSS vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 touserid parameter to modules/pm/pmlite.php or the 2 currentfile, 3 imgcatid, or 4 target parameter to...

WordPress TinyMCE Advanced Plugin <= 4.1 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

TinyMCE Advanced <= 4.1 - Setting Reset Cross-Site Request Forgery (CSRF)

The Advanced Editor Tools previously TinyMCE Advanced WordPress plugin was affected by a Setting Reset Cross-Site Request Forgery CSRF security vulnerability...

TinyMCE 3.5 - swfupload Cross-Site Scripting

The Ultimate TinyMCE WordPress plugin was affected by a swfupload Cross-Site Scripting security vulnerability...

Tinymce Thumbnail Gallery <= 1.0.7 - download-image.php Local File Inclusion

The Tinymce Thumbnail Gallery WordPress plugin was affected by a download-image.php Local File Inclusion security vulnerability. As seen in access logs: http://www.example.com/wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php?href=../../../../wp-config.php...

WordPress Ruven Toolkit Plugin <= 1.1 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability via tinymce/popup.php popup parameter. Solution Update the plugin...

WordPress mb.YTPlayer Plugin <= 1.7.2 - Unspecified Issue

This plugin is prone to TinyMCE Popup Uunspecified issue. Solution Update the plugin...

Tinymce Thumbnail Gallery <= 1.0.7 - download-image.php Local File Inclusion

The Tinymce Thumbnail Gallery WordPress plugin was affected by a download-image.php Local File Inclusion security vulnerability. PoC As seen in access logs: http://www.example.com/wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php?href=../../../../wp-config.php...

WEBMIS CMS Shell Upload

Exploit Title : WEBMIS CMS Shell Upload vulnerability Author : Jagriti Sahu Vendor : http://www.ksphp.com Download Link : https://github.com/ksphp/webmis version affected : all Date : 14/07/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mradula and Harry //////////////////////// /// Overvie...

Joomla 1.5.12 RCE via TinyMCE - Upload Vulnerability

No description provided by source. ?php / Joomla 1.5.12 Remote Code Execution via TinyMCE upload vulnerability Tested against : - Joomla 1.5.12 / Ubuntu 8.10 / Apache 2.2.9 - Joomla 1.5.12 / Windows XP SP2 / Apache 2.2.12 Luca daath De Fulgentis - daath at nibblesec.org http://blog.nibblesec.org ...