Prajal Kulkarni

A vulnerabilidade está relacionada a um problema de Cross-Site Scripting (XSS).

A vulnerabilidade permite que invasores remotos executem scripts da Web ou HTML arbitrários por meio de parâmetros não especificados, o que pode levar a ataques de Cross-site Scripting (XSS).

The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, which can lead to cross-site scripting (XSS) attacks.

The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the `url` parameter in the `rss.class/scripts/magpie debug.php` file.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `page` parameter. This can lead to the execution of malicious code on the client-side.

The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the `rss url` parameter in the magpie/scripts/magpie slashbox.php file.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `filename` parameter to "getid3/demos/demo.mimeonly.php".

The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This is achieved via the `tags` or `search for` parameter in the templates/default/index ajax.php file.

The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the `testing` parameter in the diagnostics/test.php file.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `paymentType` parameter in the `library/includes/payment/paypalexpress/DoDirectPayment.php` file.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `t` parameter in the includes/getTipo.php file. This could potentially lead to unauthorized actions on the affected website.

A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `mediaid` parameter in the tpls/editmedia.php file.

The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the `post id` parameter in the uploader.php file.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `filter` parameter in the wp-plugins-net/index.php file. This could potentially lead to unauthorized actions on the affected website.

The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the `xhrurl` parameter in the test.php file.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the forms/search.php file of the WP-Business Directory plugin for WordPress. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the `edit`, `search term`, `page id`, `page`, or `page links` parameters.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerable parameters are the `listname` and `contact` parameters in the contact/edit.php file.

A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `ytmpw` parameter in the settings/pwsettings.php file.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `xhrurl` parameter in the services/diagnostics.php file.

The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the `action` parameter in the client-assist.php file.