cross-site scripting – PossibleThreat Articles

Open source bugs have skyrocketed, according to a report from WhiteSource, with XSS flaws account for a quarter of those bugs.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/ex96Deh5Pk4″ height=”1″ width=”1″ alt=””/>

Security Sophos

XSS plugin vulnerabilities plague WordPress users

March 3, 2020 0 Comments async, cross-site scripting, flexible checkout fields, JavaScript, plugins, security threats, vulnerability, woocommerce, Wordpress, WordPress plugin, XSS

Credit to Author: Danny Bradbury| Date: Tue, 03 Mar 2020 10:44:44 +0000

Thousands of active WordPress plugins have been hit with a swathe of XSS vulnerabilities that could give attackers complete control of the site.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Bjh4-1ye-9E” height=”1″ width=”1″ alt=””/>

Security Sophos

Cookie-nabbing app could have served users side helping of XSS

February 14, 2020 0 Comments cookie consent, cookies, cross-site scripting, CVE, GDPR, gdpr cookie consent plugin, ninja technologies, security threats, wordfence, Wordpress, XSS

Credit to Author: Danny Bradbury| Date: Fri, 14 Feb 2020 12:29:39 +0000

A popular GDPR compliance WordPress plugin vendor has patched a flaw that rendered both site visitors and admins vulnerable to XSS attacks.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/uCTRH0KiVPg” height=”1″ width=”1″ alt=””/>

Security Sophos

No surprises in the top 25 most dangerous software errors

September 19, 2019 0 Comments buffer flaws, common vulnerabilities and exposures, common weakness enumeration, cross-site scripting, CVEs, cwe, mitre, security bugs, security threats, vulnerability, XSS

Credit to Author: Danny Bradbury| Date: Thu, 19 Sep 2019 08:58:17 +0000

An in-depth study of reported bugs has produced a list of the top 25 bug categories in software today – with some old familiar names topping the list.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/rJcjSJP7NLU” height=”1″ width=”1″ alt=””/>

Security Sophos

Serious flaws in six printer brands discovered, fixed

August 15, 2019 0 Comments Brother, cross-site scripting, Denial of Service, flaws, hardware security, Kyocera, Lexmark, printer security, printers, remote code execution, Ricoh, security threats, vulnerability, Xerox

Credit to Author: Danny Bradbury| Date: Thu, 15 Aug 2019 13:03:19 +0000

There are many ways to compromise company data, but IT teams often overlook one of the most serious: the humble printer.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/nskUwQnmN2Q” height=”1″ width=”1″ alt=””/>