2 matches found
WordPress Luzuk Team plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Luzuk Team versions = 0.1.0...
octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage
Impact This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service. Patches This vulnerability existed in the repository at HEAD, we will cut a 0.1.0 release with the fix. Workarounds None...