Filtered by CWE-79
Total 43568 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-5670 1 Booking Calendar Project 1 Booking Calendar 2024-11-21 N/A
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
CVE-2018-5668 1 Read And Understood Project 1 Read And Understood 2024-11-21 N/A
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_title parameter.
CVE-2018-5667 1 Read And Understood Project 1 Read And Understood 2024-11-21 N/A
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_pattern parameter.
CVE-2018-5666 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bg_color parameter.
CVE-2018-5665 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_height parameter.
CVE-2018-5664 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php social_icon_1 parameter.
CVE-2018-5663 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php button_text_link parameter.
CVE-2018-5662 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title parameter.
CVE-2018-5661 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_width parameter.
CVE-2018-5660 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_sub_title parameter.
CVE-2018-5659 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_title parameter.
CVE-2018-5657 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 N/A
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title_icon parameter.
CVE-2018-5655 1 Weblizar 1 Pinterest-feeds 2024-11-21 N/A
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter.
CVE-2018-5654 1 Weblizar 1 Pinterest-feeds 2024-11-21 N/A
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREE_Access_Token parameter.
CVE-2018-5653 1 Weblizar 1 Pinterest-feeds 2024-11-21 N/A
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizar_pffree_settings_save_get-users parameter.
CVE-2018-5652 1 Dark Mode Project 1 Dark Mode 2024-11-21 N/A
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_end parameter.
CVE-2018-5651 1 Dark Mode Project 1 Dark Mode 2024-11-21 N/A
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_start parameter.
CVE-2018-5550 1 Epson 1 Airprint 2024-11-21 N/A
Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.
CVE-2018-5521 1 F5 13 Big-ip Access Policy Manager, Big-ip Advanced Firewall Manager, Big-ip Analytics and 10 more 2024-11-21 N/A
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.
CVE-2018-5479 1 Foxsash 1 Imghosting 2024-11-21 N/A
FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admin(s). By sending users an infected URL, code will be executed.