about-me vulnerabilities and exploits

(subscribe to this query)

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin <= 1.0.12 at WordPress.

Alessio Caiazza About Me (wordpress Plugin)About-me Project About-me

Cross-Site Request Forgery (CSRF) vulnerability in Csaba Kissi About Me 3000 widget plugin <= 2.2.6 versions.

Csaba Kissi About Me 3000 Widget About Me 3000 Widget Project About Me 3000 Widget

The About Me 3000 widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator...

D3wp About Me 3000 Widget Wpmaniax About Me 3000

Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote malicious users to inject arbitrary web script or HTML via the (1) AboutMe/RealName, (2) AboutMe/Name, (3) AboutMe/Quote, (4) AboutMe/Loc, (5) AboutMe/Emp, (6) AboutMe/...

Zodiacdm Aboutme-plugin 1.1.1

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Jahia xCM prior to 6.6.2 allows remote authenticated users to inject arbitrary web script or HTML via the "about me" field.

Jahia Jahia Xcm

A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the About Me parameter in the Edit Profile page.

Monstra Monstra Cms 3.0.4 Monstra Monstra 3.0.4

A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote malicious users to store arbitrary code in the 'about me' section of their profile.

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the className parameter in the About Me block in all versions up to, and including, 2.0.39 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacke...

Creativethemes Blocksy

The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network & Membership WordPress plugin prior to 1.0.7 does not properly sanitise its Biography field, allowing any authenticated user to set Cross-Site Scripting payloads in it, which will be...

Unknown Youzify – Buddypress Community, User Profile, Social Network & Membership Plugin For Wordpress Kainelabs Youzify

In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, ...

1 Github repository

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook