4 matches found
EUVD-2020-21452
Malware in sbrugna...
CVE-2015-9419: Improper Neutralization of Input During Web Page Generation
The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section...
CVE-2018-10367: Improper Neutralization of Input During Web Page Generation
An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...
CVE-2018-10121: Improper Neutralization of Input During Web Page Generation
plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the title section of an admin/index.php?id=pages&action=editpage&name=error404 aka Edit 404 page action...