HTB22889: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22889 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

WordPress Rating Widget Plugin 1.3.1 - Multiple Cross-Site Scripting Vulnerabilities

Rating Widget plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication...

WordPress Plugin Rating-Widget 1.3.1 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Rating-Widget 1.3.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46904/info Rating-Widget is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the...

WordPress Plugin Rating-Widget 1.3.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46904/info Rating-Widget is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

HTB22891: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22891 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin2.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

Fedora Update for perl-Gtk2-MozEmbed FEDORA-2011-2447

Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2011-2447 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 13 Update: perl-Gtk2-MozEmbed-0.08-6.fc13.21

This module allows you to use the Mozilla embedding widget from Perl...

Fedora Update for perl-Gtk2-MozEmbed FEDORA-2011-2444

Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2011-2444 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Cross-site Scripting (XSS) Vulnerabilities in Rating-Widget

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Rating-Widget WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Rating-Widget 1.1 The vulnerability exists due to input sanitation...

WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting

WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker m...

WordPress IGIT Posts Slider Widget Plugin 1.0 - Cross-Site Scripting

IGIT Posts Slider Widget plugin's "src" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin IGIT Posts Slider Widget 1.0 - 'src' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

CVE-2010-4710

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

Cross site scripting

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

CVE-2010-4710

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

CVE-2010-4710

CVE-2010-4710: YUI Library XSS via addItem in the Menu widget, prior to 2.9.0. A field added to a menu can be injected with script/HTML if treated as text instead of HTML, enabling remote script execution in the victim’s browser. The issue is tied to how the field is validated and documented, per...

CVE-2010-4710

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

CVE-2010-4569

Cross-site scripting XSS vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the real name field of a user account, related to the AutoComplete widget in YUI...

Cross site scripting

Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...

CVE-2010-4570

Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...