6 matches found
Zedity <= 2.5.0 - Cross-Site Scripting (XSS)
The Zedity – The Layout-Free Content Editor WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Zedity <= 2.4.0 - Cross-Site Scripting (XSS)
The Zedity – The Layout-Free Content Editor WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Zedity Plugin <= 2.5.0 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Zedity Plugin <= 2.4.0 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...
WordPress Zedity插件'zaction'参数跨站脚本漏洞
Bugtraq ID:65799 WordPress是一种使用PHP语言开发的博客平台,用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Zedity插件不正确过滤用户提交的'zaction'参数数据,远程攻击者可以利用漏洞构建恶意URI,诱使用户解析,可获得敏感Cookie,劫持会话或在客户端上进行恶意操作。 0 WordPress Zedity 2.4.0 目前没有详细解决方案提供: http://wordpress.org/plugins/...
WordPress Zedity 2.4.0 Cross Site Scripting
============================================================== Title ...| Zedity XSS Version .| zedity.2.4.0 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://wordpress.org/plugins/ ==============================================================...