Uploader 1.0.0 - wp-content/plugins/uploader/views/notify.php num Parameter XSS

The uploader WordPress plugin was affected by a wp-content/plugins/uploader/views/notify.php num Parameter XSS security vulnerability...

CVE-2013-2287

Multiple cross-site scripting XSS vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter...

CVE-2013-2287

Multiple cross-site scripting XSS vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter...

CVE-2013-2287

The CVE-2013-2287 issue affects WordPress Uploader Plugin 1.0.4, specifically XSS in views/notify.php via the notify or blog parameters. The underlying vulnerability allows remote attackers to inject arbitrary scripts/HTML, with impact limited to partial integrity impact and no confidentiality/av...

PT-2014-2578

Name of the Vulnerable Software and Affected Versions Uploader plugin version 1.0.4 for WordPress Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the notify or blog parameters...

WordPress Uploader Plugin <= 1.0.4 - Cross Site Scripting

WordPress Uploader plugin's "blog" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

Uploader Plugin for WordPress File Upload Arbitrary Code Execution

The Uploader Plugin for WordPress installed on the remote host is affected by a file upload vulnerability due to a failure to properly verify or sanitize user-uploaded files. An unauthenticated, remote attacker can exploit this issue to upload files with arbitrary code and then execute them on th...

CVE-2012-3814

Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then accessing it via a direct request to the file in font-uploader/fonts...

CVE-2012-3814

CVE-2012-3814 affects the Font Uploader WordPress plugin (version 1.2.4). The vulnerability is an unrestricted file upload in font-upload.php, enabling remote attackers to upload a PHP file with a .php.ttf extension and then access it under font-uploader/fonts, leading to arbitrary PHP code execu...