CVE-2018-6469

The CVE concerns a cross-site scripting (XSS) flaw in WordPress’s flickrRSS plugin, version 5.3.1. The vulnerability lies in flickrRSS.php, exploitable via the flickrRSS_tags parameter submitted to wp-admin/options-general.php. This allows remote attackers to inject arbitrary web script or HTML. ...

CVE-2018-6469

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSStags parameter to wp-admin/options-general.php...

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, Inc. that includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in Synacor ZCS. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HT...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Integrated Portal 2.2.0.0 through 2.2.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0311

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

CVE-2016-0303

Cross-site scripting XSS vulnerability in IBM Tivoli Integrated Portal 2.2.0.0 through 2.2.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0311

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

CVE-2015-2796

Multiple cross-site scripting XSS vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the searchfor parameter to 1 searchbytag.php, 2 searchcontacts.php, or 3 search.php...

CVE-2016-0311

IBM Tivoli Business Service Manager (TBSM) versions affected: 6.1.0 prior to 6.1.0-TIV-BSM-FP0004 and 6.1.1 prior to 6.1.1-TIV-BSM-FP0004. Description across sources identifies a cross-site scripting (XSS) vulnerability stemming from improper validation of user-supplied input, enabling a remote a...

CVE-2015-2796

Project-Pier ProjectPier-Core is affected by multiple XSS vulnerabilities in the search functionality. The issue arises from the search_for parameter being unsafely echoed by three pages: search_by_tag.php, search_contacts.php, and search.php, enabling remote attackers to inject arbitrary web scr...

Cross site scripting

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0511

Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0511

Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0511

CVE-2018-0511 affects the WordPress WP Retina 2x plugin. The vulnerability is a cross-site scripting flaw in WP Retina 2x versions prior to 5.2.2, allowing an attacker to inject arbitrary web script or HTML via unspecified vectors; impact can manifest as script execution in a logged-in user’s bro...

CVE-2018-6194

A cross-site scripting XSS vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin wp-splashing-images before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.php...

Cross site scripting

A cross-site scripting XSS vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin wp-splashing-images before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.php...

CVE-2018-6194

A cross-site scripting XSS vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin wp-splashing-images before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.php...