Vulnerabilities (CVE)

Filtered by CWE-79
Total 36942 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-5671 1 Booking Calendar Project 1 Booking Calendar 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extra_field1[items][field_item1][price_percent] parameter.
CVE-2018-5670 1 Booking Calendar Project 1 Booking Calendar 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
CVE-2018-5668 1 Read And Understood Project 1 Read And Understood 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_title parameter.
CVE-2018-5667 1 Read And Understood Project 1 Read And Understood 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_pattern parameter.
CVE-2018-5666 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bg_color parameter.
CVE-2018-5665 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_height parameter.
CVE-2018-5664 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php social_icon_1 parameter.
CVE-2018-5663 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php button_text_link parameter.
CVE-2018-5662 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title parameter.
CVE-2018-5661 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_width parameter.
CVE-2018-5660 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_sub_title parameter.
CVE-2018-5659 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_title parameter.
CVE-2018-5657 1 Responsive Coming Soon Page Project 1 Responsive Coming Soon Page 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title_icon parameter.
CVE-2018-5655 1 Weblizar 1 Pinterest-feeds 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter.
CVE-2018-5654 1 Weblizar 1 Pinterest-feeds 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREE_Access_Token parameter.
CVE-2018-5653 1 Weblizar 1 Pinterest-feeds 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizar_pffree_settings_save_get-users parameter.
CVE-2018-5652 1 Dark Mode Project 1 Dark Mode 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_end parameter.
CVE-2018-5651 1 Dark Mode Project 1 Dark Mode 2024-11-21 3.5 LOW 4.8 MEDIUM
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_start parameter.
CVE-2018-5550 1 Epson 1 Airprint 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.
CVE-2018-5521 1 F5 13 Big-ip Access Policy Manager, Big-ip Advanced Firewall Manager, Big-ip Analytics and 10 more 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.