XSS - CVE CyberSecurity Database News (Page 149)

Nov 3, 2022 XSS WordPress Exploit JumpDEMAND Inc. 4ECPS Web Forms (WordPress plugin)

CVE-2022-44628 - Exploiting Authenticated Stored XSS in 4ECPS Web Forms Plugin <= .2.17 (WordPress Guide with Code Sample)

--- If you’re running a WordPress site and use the 4ECPS Web Forms plugin by JumpDEMAND Inc., _this is a must-read_. The vulnerability tracked

Nov 3, 2022 XSS Exploit PHP Auieo Candidats

CVE-2022-42747 - How a Simple XSS in CandidATS 3.. Lets Hackers Steal Your Cookies

CVE-2022-42747 is a security vulnerability in CandidATS, an open source applicant tracking system, version 3... The problem? It fails to properly validate some user-supplied data

CVE-2022-42753 - How SalonERP 3..2’s XSS Bug Can Expose User Cookies

Nov 3, 2022 XSS Exploit Salonerp

CVE-2022-42753 - How SalonERP 3..2’s XSS Bug Can Expose User Cookies

SalonERP is a management software used by salons and spas for handling appointments, customers, and finances. With the increasing digitalization, securing your clients’ data becomes

Nov 3, 2022 XSS PHP Auieo Candidats

CVE-2022-42750 - File Upload Flaw in CandidATS 3.. Lets Attackers Steal User Cookies

CandidATS is a popular open-source applicant tracking system used by many companies. In version 3.., it has a dangerous vulnerability known as CVE-2022-42750. This flaw

Nov 3, 2022 XSS Exploit PHP Emlog

CVE-2022-43372 - Reflected XSS Vulnerability in Emlog Pro v1.7.1’s /admin/store.php – Explained

In late 2022, security researchers discovered and reported a reflected cross-site scripting (XSS) vulnerability in Emlog Pro v1.7.1, specifically at the /admin/store.