Lucene search
+L

278 matches found

wpexploit
wpexploit
added 2021/12/29 12:0 a.m.85 views

Learning Courses < 5.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the Email PDT identity token settings, which could allow high privilege users to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Visit to Paypal Setting Under Learning Plugin Enter the XSS payload " in Email PDT...

4.8CVSS0.6AI score0.00598EPSS
SaveExploits2
Wallarm Lab
Wallarm Lab
added 2021/12/02 7:36 a.m.28 views

Invisible rat: how Sentry, Datadog, and others used by XSS and JavaScript malware

We all know how it’s convenient to use tools like Sentry or Datadogs for JavaScript events monitoring. It allows to catch errors in real-time, organize and manage issues resolution process, and genuinely shift left operations to developers. But Wallarm security experts warn of dangerous patterns ...

0.2AI score
SaveExploits0
wpexploit
wpexploit
added 2021/11/08 12:0 a.m.118 views

Bookly < 20.3.1 - Staff Member Stored Cross-Site Scripting

The plugin does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue As a Staff Member, put the following payload in your Full Name Booklyn -- Profile -- Edit -- Full Name: alert/XSS/ The XSS will be triggered when an...

5.4CVSS5.2AI score0.00604EPSS
SaveExploits2
wpexploit
wpexploit
added 2021/09/20 12:0 a.m.507 views

Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting

The plugin does not escape some of its settings before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. Put the following payload in the Plugin's Settings General "Error message for...

4.8CVSS4.8AI score0.00622EPSS
SaveExploits2
wpexploit
wpexploit
added 2021/07/19 12:0 a.m.599 views

My Site Audit <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin does not sanitise or escape the Audit Name field when creating an audit, allowing high privilege users to set JavaScript payloads in them, even when he unfilteredhtml capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue Create an audit with the...

3.5CVSS0.1AI score0.00656EPSS
SaveExploits2
wpexploit
wpexploit
added 2021/06/28 12:0 a.m.135 views

Steam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue Enter the following payload in the "Steam Group Adrdess" setting of the plugin: "alert/XSS/...

3.5CVSS0.3AI score0.0062EPSS
SaveExploits2
OSV
OSV
added 2021/06/18 6:29 p.m.53 views

GHSA-4PWQ-FJ89-6RJC Apache Airflow Cross-site Scripting

In Apache Airflow 1.10.12, the origin parameter passed to some of the endpoints like /trigger and was vulnerable to a XSS exploit...

6.1CVSS5.9AI score0.25076EPSS
SaveExploits0References14
Github Security Blog
Github Security Blog
added 2021/06/18 6:29 p.m.87 views

Apache Airflow Cross-site Scripting

In Apache Airflow 1.10.12, the origin parameter passed to some of the endpoints like /trigger and was vulnerable to a XSS exploit...

6.1CVSS2.5AI score0.25076EPSS
SaveExploits0References13Affected Software1
OSV
OSV
added 2021/05/02 8:15 a.m.24 views

CVE-2021-28359

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions 1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fi...

6.1CVSS6.4AI score
SaveExploits0References2
NVD
NVD
added 2021/05/02 8:15 a.m.35 views

CVE-2021-28359

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions 1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fi...

6.1CVSS0.14389EPSS
SaveExploits0References2
CVE
CVE
added 2021/05/02 7:55 a.m.917 views

CVE-2021-28359

Technical details for CVE-2021-28359 are not present in the provided documents. Public sources in Connected Documents do not specify affected products/versions or fixes. Monitor for updates.

6.1CVSS7.1AI score0.14389EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2020/12/11 2:15 p.m.27 views

CVE-2020-17515

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely...

6.1CVSS5.9AI score0.16028EPSS
SaveExploits0References8
OSV
OSV
added 2020/12/11 2:15 p.m.27 views

CVE-2020-17515

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely...

6.1CVSS5.9AI score
SaveExploits0References8
Prion
Prion
added 2020/12/11 2:15 p.m.38 views

Design/Logic Flaw

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely...

4.3CVSS5.7AI score0.25076EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2020/12/11 1:40 p.m.111 views

CVE-2020-17515

The CVE-2020-17515 issue is an XSS vulnerability in the Apache Airflow “origin” parameter (e.g., in /trigger). The root cause is an unpatched origin parameter allowing reflected/scriptable input. Public details indicate affected versions include Airflow releases prior to the patched point (initia...

6.1CVSS5.9AI score0.16028EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2020/12/11 1:40 p.m.34 views

CVE-2020-17515

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely...

5.8AI score0.16028EPSS
SaveExploits0References8
wpexploit
wpexploit
added 2020/10/15 12:0 a.m.50 views

Comment Press < 2.7.2 - Unauthenticated Cross-Frame Scripting

An Unauthenticated Cross-Frame Scripting vulnerability was discovered in the Comment Press plugin v2.7.0 for WordPress. ! :: PoC Burp Suite: POST /wp-comments-post.php HTTP/1.1 Host: example.com Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest...

0.8AI score
SaveExploits0References2
OSV
OSV
added 2020/09/17 2:15 p.m.24 views

CVE-2020-13944

In Apache Airflow 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit...

6.1CVSS5.8AI score
SaveExploits0References9
Prion
Prion
added 2020/09/17 2:15 p.m.22 views

Design/Logic Flaw

In Apache Airflow 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit...

4.3CVSS5.7AI score0.25076EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2020/09/17 2:1 p.m.34 views

CVE-2020-13944

In Apache Airflow 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit...

5.8AI score0.25076EPSS
SaveExploits0References9
Rows per page
Query Builder