Important: Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0

Red Hat Trusted Profile Analyzer 1.2.0 release Red Hat Product Security has rated this update as having a security impact of Moderate Red Hat Trusted Profile Analyzer 1.2.0...

WordPress Print PDF Generator and Publisher Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Print PDF Generator and Publisher Type Plugin Vulnerable versions = 1.1.6 Fixed in 1.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52394 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 67f74bacc218 Credits SOPROBRO Required...

WordPress plugin LIQUID BLOCKS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

CVE-2024-51584

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Anas Edreesi Marquee Elementor with Posts allows DOM-Based XSS.This issue affects Marquee Elementor with Posts: from n/a through 1.2.0...

CVE-2024-51584

CVE-2024-51584 affects the WordPress plugin Marquee Elementor with Posts, specifically versions 1.2.0 and earlier. The issue is DOM-based Cross-Site Scripting caused by improper neutralization of input during web page generation, enabling an attacker to inject script via the plugin’s rendering of...

WordPress plugin Marquee Elementor with Posts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-34734 · WordPress · Wpgrids Slicko

Name of the Vulnerable Software and Affected Versions: wpgrids Slicko versions 1.2.0 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS vulnerability, allowing DOM-Based XSS attacks. This...

WordPress plugin Cowidgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Slicko 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Cowidgets 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress 活动链接推广插件 plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin 活动链接推广插件 versions = 1.2.0...

WordPress LIQUID BLOCKS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software LIQUID BLOCKS Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52357 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b12c7cafe383 Credits João Pedro S Alcântara Kinorth Required...

CVE-2024-28180 affecting package dcos-cli for versions less than 1.2.0-19

CVE-2024-28180 affecting package dcos-cli for versions less than 1.2.0-19. A patched version of the package is available...

WordPress Slicko plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Slicko versions = 1.2.0...

WordPress Smart Mockups plugin <= 1.2.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Smart Mockups versions = 1.2.0...

WordPress Slicko Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Slicko Type Plugin Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51591 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cabca6de3c74 Credits Gab Required privilege Contributor Published 31...

PT-2024-33144 · Wear Sync · Wear Sync

Name of the Vulnerable Software and Affected Versions: Wear Sync version 1.2.0 Description: The issue is related to incorrect access control in the firmware update and download processes. This allows attackers to access sensitive information by analyzing the code and data within the APK file...

YingSheng Wear Sync 安全漏洞

YingSheng Wear Sync is a mobile application for connecting smart devices from YingSheng China. A security vulnerability exists in YingSheng Wear Sync v1.2.0, which stems from incorrect access control during firmware updates and downloads...

Amazon Linux 2023 : runc (ALAS2023-2024-725)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-725 advisory. runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or...

07FLYCMS、07FLY-CMS和07FLY CRM 代码问题漏洞

07FLY CRM and so on are the products of China Zero Takeoff 07FLY company. 07FLY CRM is an OA office system. 07FLY-CMS is a free and open-source content management system. 07FLYCMS is a free and open-source content management system CMS, which can be used independently to meet the needs of all kin...