Vendor archive

moxiecode CVEs

Beta · best-effort

4 CVEs tagged to vendor moxiecode — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2013-0237

Published Jul 8, 2013

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2012-2401

Published Apr 21, 2012

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-4599

Published Dec 31, 2005

Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index pa…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-4600

Published Dec 31, 2005

Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte (%…

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1