XSS - CVE CyberSecurity Database News (Page 157)

Oct 31, 2022 CSS XSS WordPress PHP WP Word Count

CVE-2022-3408 - How WP Word Count Plugin’s Settings Risk XSS, Even for Admins

WordPress plugins are famous for boosting site functionality but, unfortunately, sometimes also for their security holes. Today, let's deep-dive into a real-world example—

Oct 31, 2022 XSS WordPress Exploit PHP Newspaper

CVE-2022-2167 - Reflected XSS Vulnerability in Newspaper WordPress Theme (< v12) – Deep Dive & Exploit Example

If you are running a WordPress site with the popular Newspaper theme and haven’t updated to version 12, you may be at risk! This

Oct 31, 2022 XSS WordPress Exploit Newspaper

CVE-2022-2627 - Exploiting Reflected XSS in Newspaper WordPress Theme (Before v12)

The Newspaper WordPress theme is one of the most used and praised news-style templates, employed by thousands of blogs and online magazines. However, in June

Oct 31, 2022 XSS PHP Processwire

CVE-2022-40487 - Unpacking the ProcessWire v3..200 Search XSS Vulnerabilities

ProcessWire is a popular open-source PHP content management system (CMS) used by thousands of websites, prized for its flexibility and lightweight design. However, even the

Oct 31, 2022 XSS PHP

CVE-2022-3766 - Reflected Cross-site Scripting (XSS) in phpMyFAQ Before 3.1.8 — Explanation, Exploit, and Prevention

CVE-2022-3766 is a Reflected Cross-site Scripting (XSS) vulnerability found in the popular open-source project phpMyFAQ. The security flaw existed in versions prior to 3.1.