PT-2023-12660

Name of the Vulnerable Software and Affected Versions The Yellow Yard Searchbar WordPress plugin versions prior to 2.8.2 Description The issue is related to Reflected Cross-Site Scripting. It occurs because the plugin does not properly escape some URL parameters before outputting them back to the...

Yellow Yard < 2.8.12 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks yyfilter field='" style=background-color:red...

Yellow Yard < 2.8.12 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC yyfilter field='"...

PT-2022-25528 · Unknown · Yellow Tree Geolocation Ip Detection Plugin

Name of the Vulnerable Software and Affected Versions: Yellow Tree Geolocation IP Detection Plugin affected versions not specified Description: A vulnerability was found in the Yellow Tree Geolocation IP Detection Plugin, classified as problematic. It affects an unknown function of the component...

Yellow Yard Searchbar <= 2.7.27 - Reflected Cross-Site Scripting

The plugin does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting /?searchjob="...

Yellow Yard Searchbar <= 2.7.27 - Reflected Cross-Site Scripting

The plugin does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting PoC /?searchjob="...

WordPress Yellow Yard Searchbar plugin <= 2.7.27 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Victor Pasman in WordPress Yellow Yard Searchbar plugin versions = 2.7.27. Solution No patched version available...

yellow-pages.kz Cross Site Scripting vulnerability OBB-2131574

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Command Execution Vulnerability in Little Yellow Stripe PC Client Software

Little Yellow Stripes is a cross-platform todolist that supports Windows, Android, and IOS, and the Windows client supports embedded desktop. Little Yellow Stripes pc client software has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

yellow-car.info Cross Site Scripting vulnerability OBB-1304127

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Code injection

In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...

yellow-page-canada.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1153351 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

yellow-werbemittel.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137750 Security Researcher NUMAN Helped patch 32 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...

yellow-werbemittel.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1136019 Security Researcher NUMAN Helped patch 34 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...

yellow-werbemittel.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135112 Security Researcher NUMAN Helped patch 32 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...

yellow-werbemittel.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1133611 Security Researcher NUMAN Helped patch 32 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...

yellow-werbemittel.de Cross Site Scripting vulnerability

Security Researcher SecuNinja Helped patch 3412 vulnerabilities Received 12 Coordinated Disclosure badges Received 69 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...

web.yellow-cap.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-930027 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

WordPress Yellow Pencil Plugin Privilege Escalation

An Option Update vulnerability exists in WordPress Yellow Pencil Plugin. Successful exploitation of this vulnerability could lead to modification of any options of the affected site...

Yellow Pencil Visual Theme Customizer Plugin for WordPress < 7.2.1 Privilege Escalation

The WordPress Yellow Pencil Visual Theme Customizer Plugin installed on the remote host is affected by a privilege escalation vulnerability due to 'ypremotegetfirst' function. An unauthenticated, remote attacker can leverage this issue to perform WordPress actions that were restricted to...