CVE-2026-7330: Improper Neutralization of Input During Web Page Generation

The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This is due to insufficient input sanitization on the 'url' POST parameter in the aalurlstatssaveaction function and a complete absence of output escaping in...

EUVD-2021-21881

Malware in sbrugna...

CVE-2021-35238

User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website...

CVE-2021-35238

User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website...

CVE-2021-35238 Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability

User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website...

PT-2021-20860

Name of the Vulnerable Software and Affected Versions: Orion Platform affected versions not specified Description: The issue allows a user with Orion Platform Admin Rights to store XSS through a URL POST parameter in the CreateExternalWebsite website. No information is provided about the estimate...

CVE-2021-35238: Improper Neutralization of Input During Web Page Generation

User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website...