5218 matches found
Cross site scripting
The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...
CVE-2019-15643
The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...
CVE-2019-15643
The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...
CVE-2019-15643
CVE-2019-15643 affects the WordPress Ultimate FAQ plugin, specifically versions before 1.8.22, with a cross-site scripting (XSS) vulnerability. The root cause and exact exploitation details are not provided in the connected documents, but multiple sources corroborate the XSS risk in this plugin. ...
PT-2019-14315
Name of the Vulnerable Software and Affected Versions ultimate-faqs plugin versions prior to 1.8.22 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For versions prior to 1.8.22, update to version 1.8.22 or later to resolve the issue...
CVE-2019-15643: Improper Neutralization of Input During Web Page Generation
The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...
CVE-2017-18580
The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...
CVE-2017-18580
The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...
CVE-2017-18580: Improper Input Validation
The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...
PT-2019-8514
Name of the Vulnerable Software and Affected Versions shortcodes-ultimate plugin versions prior to 5.0.1 Description The issue allows for remote code execution via a filter in a meta, post, or user shortcode. Recommendations For versions prior to 5.0.1, update to version 5.0.1 or later to resolve...
WordPress wp-ultimate-exporter plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-exporter is a plugin that exports CSV files based on filtering criteria used in it. A cross-site request forgery...
CVE-2019-14427
XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...
CVE-2019-14427
XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...
Cross site scripting
XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...
CVE-2019-14427
XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...
CVE-2019-14427
CVE-2019-14427 describes an XSS vulnerability in WEB STUDIO Ultimate Loan Manager 2.0. The issue arises when an attacker injects crafted JavaScript by setting the notes parameter via the Branches workflow (branch/store, as noted in multiple sources). The vulnerability supports at least a persiste...
CVE-2018-20968
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...
Cross site request forgery (csrf)
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
CVE-2018-20967
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
CVE-2018-20967
The CVE-2018-20967 issue affects the WordPress plugin wp-ultimate-csv-importer prior to version 5.6.1, which is vulnerable to CSRF. Multiple sources (NVD, Red Hat, CNVD, OpenVAS, WPVulnDB, PT-2019-10403) confirm the affected software and the vulnerability class, with remediation guidance consiste...