WordPress SEO Booster plugin <= 3.8.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin SEO Booster versions = 3.8.9...

SofaWiki 跨站脚本漏洞

SofaWiki is a CMS built on PHP. A cross-site scripting vulnerability exists in SofaWiki 3.8.9 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in index.php, and can be exploited by an attacker to execute arbitrary web script or HTML by...

WordPress Headway theme cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Headway theme versions prior to 3.8.9. The...