8559 matches found
Wordpress Login Widget With Shortcode 3.1.1 - Multiple Vulnerabilities
Exploit for php platform in category web applications Details ================ Software: Login Widget With Shortcode Version: 3.1.1 Homepage: http://wordpress.org/plugins/login-sidebar-widget/ Advisory report:...
WordPress Login Widget With Shortcode 3.1.1 CSRF / XSS Vulnerabilities
WordPress Login Widget With Shortcode plugin version 3.1.1 suffers from cross site request forgery and cross site scripting vulnerabilities. Details ================ Software: Login Widget With Shortcode Version: 3.1.1 Homepage: http://wordpress.org/plugins/login-sidebar-widget/ Advisory report:...
Cross site scripting
Cross-site scripting XSS vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email...
CVE-2012-2583
CVE-2012-2583 involves a stored XSS in the WordPress plugin Mini Mail Dashboard Widget (version 1.42). Connected sources confirm the attack vector is crafted content in the body of an email that is rendered by the plugin, exploiting insufficient input sanitization to execute arbitrary scripts in ...
CVE-2012-2583: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email...
Square: Reflected XSS in widget script thru cookie
There is buyerinfo cookie. Let set it to this value: a:9:s:10:"firstname";s:47:""xss...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Title, 2 Content, or 3 New category field to wordpress/ or 4 query string to wordpress/...
CVE-2012-4226
CVE-2012-4226 concerns the WordPress Quick Post Widget plugin (version 1.9.1). The connected sources describe multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the Quick Post Widget fields (Title, Content, New category) or v...
CVE-2012-4226
Multiple cross-site scripting XSS vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Title, 2 Content, or 3 New category field to wordpress/ or 4 query string to wordpress/...
CVE-2012-4226: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Title, 2 Content, or 3 New category field to wordpress/ or 4 query string to wordpress/...
DEBIAN-CVE-2014-5203
wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...
CVE-2014-5203
wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...
CVE-2014-5203
wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...
CVE-2014-5203
wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data...
PT-2014-6342
Name of the Vulnerable Software and Affected Versions WordPress versions 3.9.0 through 3.9.1 Description The issue in WordPress might allow remote attackers to execute arbitrary code via crafted serialized data in the widget implementation. Recommendations For WordPress versions 3.9.0 through...
Disqus 2.7.5 Cross Site Request Forgery / Cross Site Scripting
Exploit for php platform in category web applications disqus csrf reset -- -- alert1;' / 0day.today 2018-03-09...
WordPress <= 3.9.1 - Unsafe Serialization
wp-includes/class-wp-customize-widgets.php in the widget implementation in allow the attackers to execute arbitrary code via crafted serialized data. Solution Update WordPress...
SCOM console crashes when opening widget personalization dialog
Challenge When opening the Personalization dialog for any State View widget, the widget appears empty, and the Operations Manager Console crashes Cause There is a specific new widget declaration which can cause issues while loading other widgets. Solution Download Veeam Widget Library MP 7.0.0.18...
ClickDesk <= 4.3 - Live Chat Widget Multiple Field XSS
The Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites WordPress plugin was affected by a Live Chat Widget Multiple Field XSS security vulnerability...