Total
36668 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2016-11073 | 1 Mattermost | 1 Mattermost Server | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting. | |||||
| CVE-2016-11071 | 1 Mattermost | 1 Mattermost Server | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place. | |||||
| CVE-2016-11070 | 1 Mattermost | 1 Mattermost Server | 2024-11-21 | 3.5 LOW | 5.4 MEDIUM |
| An issue was discovered in Mattermost Server before 3.1.0. It allows XSS via theme color-code values. | |||||
| CVE-2016-11063 | 1 Mattermost | 1 Mattermost Server | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| An issue was discovered in Mattermost Server before 3.5.1. XSS can occur via file preview. | |||||
| CVE-2016-11016 | 1 Netgear | 2 Jnr1010, Jnr1010 Firmware | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS. | |||||
| CVE-2016-11013 | 1 Agentevolution | 1 Impress Listings | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS. | |||||
| CVE-2016-11012 | 1 Solaplugins | 1 Sola Support Tickets | 2024-11-21 | 3.5 LOW | 5.4 MEDIUM |
| The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS. | |||||
| CVE-2016-11005 | 1 Elfsight | 1 Instalinker | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS. | |||||
| CVE-2016-11001 | 1 Plugin-planet | 1 User Submitted Posts | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field. | |||||
| CVE-2016-10999 | 1 Momizat | 1 Goodnews | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter. | |||||
| CVE-2016-10998 | 1 Ocimscripts | 1 Ocim-mp3 | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS. | |||||
| CVE-2016-10994 | 1 Truemag Theme Project | 1 Truemag Theme | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter. | |||||
| CVE-2016-10993 | 1 Scoreme Project | 1 Scoreme | 2024-11-21 | 3.5 LOW | 5.4 MEDIUM |
| The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter. | |||||
| CVE-2016-10992 | 1 Codepeople | 1 Music Store | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter. | |||||
| CVE-2016-10990 | 1 Wpcerber | 1 Cerber Security Antispam \& Malware Scan | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header. | |||||
| CVE-2016-10988 | 1 Leenk | 1 Leenk.me | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer. | |||||
| CVE-2016-10987 | 1 Woocommerce | 1 Persian Woocommerce Sms | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS. | |||||
| CVE-2016-10986 | 1 Nerdcow | 1 Tweet Wheel | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret. | |||||
| CVE-2016-10985 | 1 Smackcoders | 1 Echo Sign | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter. | |||||
| CVE-2016-10984 | 1 Smackcoders | 1 Echo Sign | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
| The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter. | |||||