Lucene search
K

6 matches found

WPVulnDB
WPVulnDB
added 2014/08/01 10:59 a.m.7 views

Zedity <= 2.5.0 - Cross-Site Scripting (XSS)

The Zedity – The Layout-Free Content Editor WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

1.7AI score
Exploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:59 a.m.5 views

Zedity <= 2.4.0 - Cross-Site Scripting (XSS)

The Zedity – The Layout-Free Content Editor WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

1.7AI score
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:0 a.m.8 views

WordPress Zedity Plugin <= 2.5.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

2.2AI score
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:0 a.m.19 views

WordPress Zedity Plugin <= 2.4.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...

6.8CVSS2.1AI score0.02191EPSS
Exploits2References1Affected Software1
seebug.org
seebug.org
added 2014/02/28 12:0 a.m.17 views

WordPress Zedity插件'zaction'参数跨站脚本漏洞

Bugtraq ID:65799 WordPress是一种使用PHP语言开发的博客平台,用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Zedity插件不正确过滤用户提交的'zaction'参数数据,远程攻击者可以利用漏洞构建恶意URI,诱使用户解析,可获得敏感Cookie,劫持会话或在客户端上进行恶意操作。 0 WordPress Zedity 2.4.0 目前没有详细解决方案提供: http://wordpress.org/plugins/...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2014/02/26 12:0 a.m.20 views

WordPress Zedity 2.4.0 Cross Site Scripting

============================================================== Title ...| Zedity XSS Version .| zedity.2.4.0 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://wordpress.org/plugins/ ==============================================================...

7AI score
Exploits0
Rows per page
Query Builder