WordPress Plugin Event Calendar WD Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Event Calendar WD, which could allow an attacker to execu...

JVN#75738023: WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting

The WordPress plugin "Event Calendar WD" provided by Web-Dorado contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged-in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the...

Event Calendar WD <= 1.1.21 - Cross-Site Scripting (XSS)

The Event Calendar WD – Responsive Event Calendar plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Western Digital WD TV Detection

Detection of Western Digital WD TV. The script sends a connection request to the server and attempts to detect Western Digital WD TV and to extract its firmware version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

CVE-2018-10504

The CVE-2018-10504 entry concerns the WordPress plugin WebDorado Form Maker by WD, version prior to 1.12.24, which is vulnerable to CSV injection. The root cause is that CSV data exported by the Form Maker form can be crafted to execute commands when opened by a user with sufficient privileges, e...

WordPress WD #Instagram Feed Premium 1.3.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications WD Instagram Feed 1.3.0aaaXSS Vulnerabilities Two cross-site scripting vulnerabilities in the WD Instagram Feed WordPress plugin allow attackers to inject arbitrary web script or HTML by passing payloads through the bio of an Instagram profile...

CVE-2018-10300

Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post...

CVE-2018-10301

Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post...

CVE-2018-10301

CVE-2018-10301 : Cross-site scripting in the WordPress plugin WD Instagram Feed Premium (Web-Dorado) for WordPress. The vulnerability exists before version 1.3.1 and allows remote attackers to inject arbitrary script/HTML by submitting payloads in comments on an Instagram post. Impact is XSS in p...

CVE-2018-9148

Western Digital WD My Cloud v04.05.00-320 devices embed the session token aka PHPSESSID in filenames, which makes it easier for attackers to bypass authentication by listing a directory. NOTE: this can be exploited in conjunction with CVE-2018-7171 for remote authentication bypass within a produc...

CVE-2018-9148

Western Digital WD My Cloud v04.05.00-320 devices embed the session token aka PHPSESSID in filenames, which makes it easier for attackers to bypass authentication by listing a directory. NOTE: this can be exploited in conjunction with CVE-2018-7171 for remote authentication bypass within a produc...

Gallery WD, 1.3.9, SQL Injection

Gallery WD by Web Dorado, versions 1.3.9 and previous, SQL Injection resolution: update to 1.3.10 update notice: https://web-dorado.com/products/joomla-gallery.html...

WordPress Photo Gallery by WD plugin <=1.3.66 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress Photo Gallery by WD plugin versions =1.3.66. Solution Update the WordPress Photo Gallery by WD plugin to the latest available version at least 1.3.67...

Photo Gallery by WD <= 1.3.66 - Cross-Site Scripting (XSS)

User input gets first escaped with eschtml and then urldecoded. This leads to the possibility of reflected XSS with a double url encoded payload...

Photo Gallery by WD <= 1.3.66 - Cross-Site Scripting (XSS)

User input gets first escaped with eschtml and then urldecoded. This leads to the possibility of reflected XSS with a double url encoded payload. PoC...

CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

Sql injection

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...