WordPress Subscribe To Comments Reloaded Plugin <= 220725 is vulnerable to Sensitive Data Exposure

Software Subscribe To Comments Reloaded Type Plugin Vulnerable versions = 220725 Fixed in 240119 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-31249 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 45c0e6e3acea...

WordPress WordPress Comments Import & Export Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software WordPress Comments Import & Export Type Plugin Vulnerable versions = 2.3.5 Fixed in 2.3.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31235 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8fb386b6b6f3 Credits...

PT-2024-23891

Name of the Vulnerable Software and Affected Versions WPKube Subscribe To Comments Reloaded versions from n/a through 220725 Description The issue is related to the insertion of sensitive information into log files. This can potentially expose sensitive data. Recommendations For versions from n/a...

PT-2024-25293 · Sourcecodester · Sourcecodester Aplaya Beach Resort Online Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue has been discovered, affecting the file admin/mod comments/index.php. The manipulation of the id argument leads to SQL injection. This issu...

Aplaya Beach Resort Online Reservation System 安全漏洞

Aplaya Beach Resort Online Reservation System is the online room reservation system for Aplaya Beach Resort. A security vulnerability exists in SourceCodester Aplaya Beach Resort Online Reservation System version 1.0, which originates from an SQL injection in the id parameter of the...

Better Comments < 1.5.6 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. From the WordPress menu on the left...

CVE-2024-26495

Cross Site Scripting XSS vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the BBCode tags in the post content and post comments function...

CVE-2024-26495: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the BBCode tags in the post content and post comments function...

CVE-2024-26495

Friendica versions released after v.2023.12 are susceptible to a Cross Site Scripting (XSS) vulnerability. The root cause involves improper neutralization of input during web page generation, specifically within the BBCode tags used in the post content and post comments functions. A remote attack...

Authorization Bypass

moodle/moodle is vulnerable to Authorization Bypass. The vulnerability is due to insufficient permission checks, which allow unauthorized users to add comments to the comments block on another user's dashboard when it is not otherwise available...

CVE-2024-30555

CVE-2024-30555 describes an Stored XSS in the plugin “Ultimate Social Comments – Email Notification & Lazy Load” due to Improp er Neutralization of Input During Web Page Generation . Affected range is listed as from n/a through 1.4.8 ; no public details on a fixed version are provided in the supp...

CVE-2024-30555 WordPress Ultimate Social Comments plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta Ultimate Social Comments – Email Notification & Lazy Load allows Stored XSS.This issue affects Ultimate Social Comments – Email Notification & Lazy Load: from n/a through 1.4.8...

CVE-2024-30555 WordPress Ultimate Social Comments plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta Ultimate Social Comments – Email Notification & Lazy Load allows Stored XSS.This issue affects Ultimate Social Comments – Email Notification & Lazy Load: from n/a through 1.4.8...

BIT-MOODLE-2024-25983 Msa-24-0006: idor on dashboard comments block

Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available e.g., on their profile page...

CVE-2024-30555: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta Ultimate Social Comments – Email Notification & Lazy Load allows Stored XSS.This issue affects Ultimate Social Comments – Email Notification & Lazy Load: from n/a through 1.4.8...

WordPress Plugin Ultimate Social Comments 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Ultimate Social Comments A...

PT-2024-23485 · Unknown · Ultimate Social Comments – Email Notification & Lazy Load

Name of the Vulnerable Software and Affected Versions: Ultimate Social Comments – Email Notification & Lazy Load versions 1.4.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability,...

WordPress Ultimate Social Comments plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Ultimate Social Comments – Email Notification & Lazy Load versions = 1.4.8...

WordPress Ultimate Social Comments – Email Notification & Lazy Load Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Social Comments – Email Notification & Lazy Load Type Plugin Vulnerable versions = 1.4.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30555 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e11e070ddc05 Credit...

CVE-2024-29804

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team Heateor Fancy Comments WordPress allows Stored XSS.This issue affects Fancy Comments WordPress: from n/a through 1.2.14...