CWE-79

CVE-2019-15869

February 26, 2023 by

The JobCareer theme before 2.5.1 for WordPress has stored XSS.

CVE-2019-15870

February 26, 2023 by

The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.

CVE-2019-15810

February 26, 2023 by

Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL parameter.

CVE-2019-15811

February 26, 2023 by

In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS.

CVE-2019-15814

February 26, 2023 by

Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML.

CVE-2019-15816

February 26, 2023 by

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions.