| Overview : |
| An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack. |
| Affected Product(s) : |
|
| Vulnerability Details : |
||||
Solution : update/upgrade to the latest versions listed in the site. |
Description Persistent XSS (or Stored XSS) attack is one of the three major categories of XSS attacks, the others being
Description Several Cross-Site Scripting vulnerabilities in the Curtain WordPress plugin. Due to these Cross-Site Scripting vulnerabilities, an attacker would be
Description It was noted that there is security checking to prevent some of the Avast processes from loading of undesired/unsigned