XSS - CVE CyberSecurity Database News (Page 174)

Feb 4, 2022 XSS WordPress API PHP

CVE-2022-0218 - How Attackers Exploit the WP HTML Mail Plugin to Hijack WordPress Sites

The WordPress platform powers a huge share of the internet, and plugins extend its functionality. But sometimes, plugins come with security holes that hackers are

Feb 3, 2022 XSS Exploit

CVE-2022-22818 - How a Django Debug Tag Put Sites at Risk for XSS (and How You Can Stay Safe)

Django is one of the most popular Python web frameworks, powering thousands of websites. But in late 2021, a sneaky vulnerability was discovered in a

Jan 26, 2022 XSS PHP

CVE-2022-23993 - How a Simple Echo in pfSense’s pkg.php Opened the Door to XSS

If you run pfSense as your firewall, you know just how critical patches and security are. Today, we'll deep-dive into CVE-2022-23993—a now-fixed

Jan 26, 2022 XSS PHP

CVE-2022-0378 - Reflected Cross-Site Scripting (XSS) in Microweber < 1.2.11—How Hackers Could Exploit Your Website

Microweber is an open-source drag-and-drop website builder powered by Laravel. It's quite popular within the PHP and Laravel community, particularly for folks wanting

Jan 25, 2022 XSS Exploit

CVE-2022-23013 - DOM-based XSS in BIG-IP DNS & GTM - How Attackers Can Take Over BIG-IP Configuration Utility Sessions

Published: Official NVD entry Introduction A dangerous vulnerability, CVE-2022-23013, was discovered in BIG-IP DNS & GTM systems. This bug is a DOM-based cross-site scripting (XSS)