Abdulsamad Yusuf

Authenticated attackers with Subscriber-level access and above can perform a time-based SQL Injection. This occurs due to insufficient escaping of the user-supplied `staff id` parameter and a lack of sufficient preparation of the SQL query. This flaw allows attackers to append additional SQL queries to existing ones to extract sensitive information from the database.

Insufficient input sanitization and output escaping in the `PHP SELF` server variable allow unauthenticated attackers to inject arbitrary web scripts. These scripts execute if a user is tricked into clicking a malicious link. The execution occurs only within the context of an administrator, as the settings page requires the `manage options` capability to render. Reflected Cross-Site Scripting is a flaw where a malicious script is reflected off a web application to the victim's browser.

Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when the `PHP SELF` parameter reflects attacker-controlled path-info from the URL directly into the form action attribute, enabling the execution of arbitrary web scripts if a user is tricked into clicking a malicious link.

Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting (XSS) via `PHP SELF`. This occurs when a user is tricked into clicking a malicious link, enabling the execution of arbitrary web scripts in their browser.

The Correct Prices plugin for WordPress is subject to Reflected Cross-Site Scripting, a flaw where an application includes untrusted data in a web page without proper validation, allowing an attacker to execute scripts in the victim's browser. The issue occurs within the `correct prices page()` function, which echoes the `$ SERVER['PHP SELF']` variable into a form's action attribute without input sanitization or output escaping. Since `$ SERVER['PHP SELF']` reflects path-info appended to the script URL, unauthenticated attackers can inject arbitrary markup and web scripts by tricking a user into clicking a specially crafted link.

The LJ comments import: reloaded plugin for WordPress contains a Reflected Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts into pages by tricking a user into clicking a link. This occurs because the `PHP SELF` parameter includes attacker-controllable `PATH INFO` appended to the script name, which is then processed through two unsanitized echo points within the same function.

Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts into pages. This occurs when a user is tricked into clicking a crafted link. The `PHP SELF` variable is reflected in a form action attribute and an anchor href attribute within the vulnerable function, which can be exploited by appending a payload to the 'wp-admin/admin.php' endpoint.

The Gravity Bookings Premium plugin for WordPress contains a SQL Injection flaw caused by insufficient escaping of user-supplied parameters and a lack of proper preparation of existing SQL queries. This allows unauthenticated attackers to append additional SQL queries to existing ones to extract sensitive information from the database.

The Comment Genius plugin for WordPress is susceptible to Reflected Cross-Site Scripting. This is due to insufficient input sanitization and output escaping of the `$ SERVER['PHP SELF']` parameter. An unauthenticated attacker could inject arbitrary web scripts into pages, which would execute if a user is tricked into performing an action, such as clicking a link.

The [CR]Paid Link Manager plugin for WordPress is susceptible to reflected cross-site scripting through the URL path. This is due to inadequate input sanitization and output escaping. An unauthenticated attacker can inject arbitrary web scripts into pages that execute if a user is tricked into clicking a malicious link.

The Address Bar Ads plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the URL Path. This is due to inadequate input sanitization and output escaping. An unauthenticated attacker could inject arbitrary web scripts into pages, which would execute if a user is tricked into performing an action, such as clicking a link.

The StyleBidet plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the URL path. This is due to inadequate input sanitization and output escaping. An unauthenticated attacker could inject arbitrary web scripts into pages, which would execute if a user is tricked into clicking a malicious link.

The personal-authors-category plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the URL path. This is due to inadequate input sanitization and output escaping. An unauthenticated attacker could inject arbitrary web scripts into pages, which would execute if a user is tricked into performing an action, such as clicking a link.

The Geo Widget plugin for WordPress is susceptible to Stored Cross-Site Scripting through the URL path. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page.

The Subitem AL Slider plugin for WordPress is susceptible to Reflected Cross-Site Scripting. This is due to insufficient input sanitization and output escaping related to the `$ SERVER['PHP SELF']` parameter. An unauthenticated attacker could inject arbitrary web scripts into pages, which would execute if a user is tricked into performing an action, such as clicking a link.

The MP-Ukagaka plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages. Successful exploitation requires tricking a user into performing an action, such as clicking a malicious link, which then executes the injected script.

The Peter's Date Countdown plugin for WordPress is susceptible to Reflected Cross-Site Scripting. This is due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary web scripts into pages, which will execute if a user is tricked into performing an action, such as clicking a link. The vulnerability is related to the `$ SERVER['PHP SELF']` parameter.

The Vzaar Media Management plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. The vulnerability affects the `$ SERVER['PHP SELF']` variable. An unauthenticated attacker could inject arbitrary web scripts into pages, which would execute if a user is tricked into performing an action, such as clicking a link.

The JustClick registration plugin for WordPress is susceptible to Reflected Cross-Site Scripting. This is a result of inadequate input sanitization and output escaping applied to the `PHP SELF` server variable. An unauthenticated attacker could inject arbitrary web scripts into pages, which would execute if a user is tricked into performing an action, such as clicking a link.

The Top Position Google Finance plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which can execute if a user is tricked into performing an action, such as clicking a link. The vulnerability is related to the `$ SERVER['PHP SELF']` variable.