1139 matches found
CVE-2024-54338
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in christerf Hello Event Widgets For Elementor hello-event-widgets-for-elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through = 1.0.2...
CVE-2024-54338
CVE-2024-54338 affects Hello Event Widgets For Elementor (WordPress) and allows DOM-based XSS due to improper neutralization of user input during web page generation for Hello Event Widgets For Elementor
CVE-2024-54338 WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christer Fernstrom Hello Event Widgets For Elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through 1.0.2...
CVE-2024-12572
The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...
CVE-2024-12572
CVE-2024-12572 affects the Hello In All Languages WordPress plugin (versions up to and including 1.0.6). The vulnerability is Cross-Site Request Forgery due to missing or incorrect nonce validation on a function, enabling unauthenticated attackers to update plugin settings and inject malicious sc...
CVE-2024-12572: Cross-Site Request Forgery (CSRF)
The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...
CVE-2024-54338: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in christerf Hello Event Widgets For Elementor hello-event-widgets-for-elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through = 1.0.2...
PT-2024-36222 · Christer Fernstrom · Hello Event Widgets For Elementor
Name of the Vulnerable Software and Affected Versions: Hello Event Widgets For Elementor versions 1.0.2 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows DOM-Based XSS. This problem...
WordPress plugin Hello Event Widgets For Elementor 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
WordPress Hello in All Languages plugin <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Rei Kobayashi in WordPress Plugin Hello In All Languages versions = 1.0.6...
WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Hello Event Widgets For Elementor versions = 1.0.2...
MAL-2024-11465 Malicious code in take4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in take4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in asdasssd-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in asdassd-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in asdasd-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11304 Malicious code in asdasd-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
UBUNTU-CVE-2024-11738
A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service panic via a fragmented TLS ClientHello message...
Malicious code in tautoak4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0a170170a102f43fd03d3b08bbcb53a572a5f48cde13250b3059ff3b332404a The OpenSSF Package Analysis project identified 'tautoak4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-10818 Malicious code in tautoak4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0a170170a102f43fd03d3b08bbcb53a572a5f48cde13250b3059ff3b332404a The OpenSSF Package Analysis project identified 'tautoak4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...