425 matches found
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
Code injection
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
WordPress visitors-traffic-real-time-statistics plugin cross-site request forgery vulnerability (CNVD-2019-30099)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-traffic-real-time-statistics is a real-time website traffic statistics plugin used in it. A cross-site request forgery...
WordPress visitors-traffic-real-time-statistics plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-traffic-real-time-statistics is a real-time website traffic statistics plugin used in it. A cross-site request forgery...
CVE-2019-15831
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
CVE-2019-15832
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF...
CVE-2019-15831
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
Cross site request forgery (csrf)
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF...
Cross site request forgery (csrf)
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
CVE-2019-15832
Affected product: WordPress plugin visitors-traffic-real-time-statistics (pre-1.13). Vulnerability: CSRF in the plugin that can trigger unintended requests from authenticated users. Root cause/impact: described as CSRF with high potential impact on confidentiality, integrity, and availability (CV...
DEBIAN-CVE-2019-15759
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js...
WordPress visitors-online plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-online is a plugin for website visitor statistics. A cross-site scripting vulnerability exists in the WordPress visitors-onli...
CVE-2017-18537
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...
CVE-2017-18537
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...
Cross site scripting
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...
CVE-2017-18537
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...
CVE-2017-18537
CVE-2017-18537 affects the WordPress plugin Visitors Online by BestWebSoft prior to version 1.0.0. The connected documents confirm multiple Cross-Site Scripting (XSS) issues in the plugin’s input handling, enabling an authenticated attacker to execute arbitrary JavaScript in victims’ browsers and...