CVE-2017-18565

The updater plugin before 1.35 for WordPress has multiple XSS issues...

CVE-2017-18565

The CVE-2017-18565 issue affects the WordPress updater plugin by BestWebSoft up to version 1.35. The connected Nuclei template and related references confirm multiple Cross-Site Scripting (XSS) flaws in the updater plugin before 1.35, enabling an attacker with authenticated access to inject and e...

CVE-2019-1003054

Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003054

Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003054

Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003054

CVE-2019-1003054 relates to the Jenkins Jira Issue Updater Plugin, where credentials are stored unencrypted in job config.xml on the Jenkins master/controller. The vulnerability arises from credentials being accessible to any user with Extended Read permission or with access to the master/control...