PT-2022-16836 · WordPress · Wp-Useronline

Name of the Vulnerable Software and Affected Versions: WP-UserOnline plugin for WordPress versions up to, and including, 2.87.6 Description: The issue is related to Stored Cross-Site Scripting via the templatesbrowsingpagetext parameter due to insufficient input sanitization and output escaping...

WordPress plugin WP-UserOnline 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress WP-UserOnline plugin <= 2.88.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Juampa Rodríguez in WordPress WP-UserOnline plugin versions = 2.88.0. Solution Update the WordPress User Online plugin to the latest available version at least 2.88.1...

WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS)

Exploit Title: WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting XSS Date: 21/07/2022 Exploit Author: Steffin Stanly Vendor Homepage: https://github.com/lesterchan/wp-useronline Software Link: https://wordpress.org/plugins/wp-useronline/ Version: WP-UserOnline and enter the data...

WordPress WP-UserOnline 2.87.6 Cross Site Scripting

Exploit Title: WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting XSS Date: 21/07/2022 Exploit Author: Steffin Stanly Vendor Homepage: https://github.com/lesterchan/wp-useronline Software Link: https://wordpress.org/plugins/wp-useronline/ Version: WP-UserOnline and enter the data...

WordPress WP-UserOnline plugin <= 2.87.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Steffin Stanly in WordPress WP-UserOnline plugin versions = 2.87.6. Solution Update the WordPress User Online plugin to the latest available version at least 2.88.0...

Wp-UserOnline <= 2.62 - Stored Cross-Site Scripting (XSS)

The WP-UserOnline WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

Persistent XSS vulnerability in WP-UserOnline

Hello 3APA3A! in 2010 I've disclosed multiple vulnerabilities Cross-Site Scripting and Full path disclosure in WordPress plugin WP-UserOnline http://securityvulns.ru/Ydocument162.html, http://seclists.org/fulldisclosure/2010/Jul/8. And recently I've disclosed the exploit for persistent XSS...

WordPress Plugin WP-UserOnline Persistent XSS vulnerability

This perl exploit I've developed at 26.04.2010. As I've wrote earlier, vulnerable are WP-UserOnline 2.62 and previous versions. After my informing the developer released WP-UserOnline 2.70 at 07.05.2010. In version 2.70 he fixed XSS, but not Full path disclosure vulnerabilities. Hello list! in 20...

WordPress WP-UserOnline 2.6.2插件脚本注入漏洞

BUGTRAQ ID: 41335 WordPress是一款免费的论坛Blog系统。 WordPress所使用的WP-UserOnline插件没有正确地过滤附加给安装路径后的URL的输入便在wp-content/plugins /wp-useronline/wp-useronline.php中显示给了用户，当用户查看时就会导致执行所注入的HTML和脚本代码。 WordPress WP-UserOnline 2.6.2 厂商补丁： WordPress --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

WordPress WP-UserOnline plugin URL HTML Injection Vulnerability (deprecated)

Binary data 5592.prm...

Vulnerabilities in WP-UserOnline for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в плагине WP-UserOnline для WordPress. XSS: С помощью специального запроса к сайту можно провести XSS атаку. Для это нужно специальным образом не через браузер отправить GET запрос к странице...

auracms-blindsql.txt

!/usr/bin/perl -w Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x online.php - Remote Blind SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/ ------------------------------------ Audit...