Cross site scripting

Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & loginsystem input fields...

CVE-2020-23051

CVE-2020-23051 involves Phpgurukul User Registration & User Management System v2.0 with multiple stored cross-site scripting (XSS) vulnerabilities. The flaws are exploitable via the firstname and lastname parameters of the registration form and the loginsystem input fields. The public documents i...

CVE-2020-23051

Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & loginsystem input fields...

Phpgurukul User Registration Login Management System 跨站脚本漏洞

Phpgurukul User Registration Login Management System is a website builder for user management from the PHPGurukul Phpgurukul team. A security vulnerability exists in Phpgurukul User Registration and User Management System version 2.0, which allows an attacker to exploit a cross-site scripting...

WordPress plugin User Registration cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers.The WordPress plugin User Registration has a cross-site scripting vulnerability that stems from the lack of proper validation ...

CVE-2021-24654

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the userregistrationprofilepicurl value when submitted directly via the userregistrationupdateprofiledetails AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attack...

CVE-2021-24654

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the userregistrationprofilepicurl value when submitted directly via the userregistrationupdateprofiledetails AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attack...

CVE-2021-24654

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the userregistrationprofilepicurl value when submitted directly via the userregistrationupdateprofiledetails AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attack...

Cross site scripting

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the userregistrationprofilepicurl value when submitted directly via the userregistrationupdateprofiledetails AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attack...

CVE-2021-24654

CVE-2021-24654 affects the WordPress plugin User Registration (before 2.0.2). The vulnerability arises because user_registration_profile_pic_url is not properly sanitised when submitted via the user_registration_update_profile_details AJAX action, allowing any authenticated user (e.g., a subscrib...

WordPress User Registration插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers.The WordPress plugin User Registration has a cross-site scripting vulnerability that stems from the lack of proper validation ...

CVE-2021-36879

Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin versions = 2.0.5. Possible if WordPress configuration allows user registration...

CVE-2021-36879

Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin versions = 2.0.5. Possible if WordPress configuration allows user registration...

Privilege escalation

Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin versions = 2.0.5. Possible if WordPress configuration allows user registration...

PT-2021-21392 · WordPress · Ulisting

Name of the Vulnerable Software and Affected Versions: WordPress uListing plugin versions prior to 2.0.6 Description: The issue is related to an Unauthenticated Privilege Escalation in the WordPress uListing plugin. This can occur if the WordPress configuration allows user registration...

WordPress User Registration plugin <= 2.0.1 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by AyeCode Ltd in WordPress User Registration plugin versions = 2.0.1. Solution Update the WordPress User Registration plugin to the latest available version at least 2.0.2...

VulnCheck KEV: CVE-2021-24654

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the userregistrationprofilepicurl value when submitted directly via the userregistrationupdateprofiledetails AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attack...

WordPress Plugin Automatic Config Change to RCE

This module exploits an unauthenticated arbitrary wordpress options change vulnerability in the Automatic wp-automatic plugin use auxiliary/admin/http/wp/automaticpluginprivesc msf undefinedautomaticpluginprivesc show actions ...actions... msf undefinedautomaticpluginprivesc set ACTION msf...

User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting

The plugin does not properly sanitise the userregistrationprofilepicurl value when submitted directly via the userregistrationupdateprofiledetails AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attacks when their profile is viewed PoC 1...

CVE-2021-24527

The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such...