CVE-2023-38478

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.2.3...

PT-2023-26461 · Crm Perks · Integration For Woocommerce/Quickbooks

Name of the Vulnerable Software and Affected Versions: Integration for WooCommerce and QuickBooks versions 1.2.3 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the CRM Perks Integrati...

WordPress plugin Integration for WooCommerce and QuickBooks Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabilit...

Stupid Simple CMS Operating System Command Injection Vulnerability

Stupid Simple CMS is a content management system by codelyfe individual developer. Stupid Simple CMS 1.2.3 and earlier versions have an operating system command injection vulnerability, which stems from an operating system command injection vulnerability in the file /terminal/handle-command.php...

PT-2023-32810 · Codelyfe · Codelyfe Stupid Simple Cms

Name of the Vulnerable Software and Affected Versions: codelyfe Stupid Simple CMS versions up to 1.2.3 Description: A critical issue was found in the HTTP POST Request Handler component, specifically affecting the file /terminal/handle-command.php. The manipulation of the command argument with th...

WebAssembly Micro Runtime Security Vulnerability

WebAssembly Micro Runtime WAMR is a lightweight, standalone WebAssembly runtime open-sourced by the Bytecode Alliance. With a small footprint, high performance, and highly configurable features for applications ranging from embedded, IoT, and edge to Trusted Execution Environments TEEs, smart...

PT-2023-30134 · Sahu · Sahu Tiktok Pixel For E-Commerce

Name of the Vulnerable Software and Affected Versions: SAHU TikTok Pixel for E-Commerce plugin versions prior to 1.2.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker ...

CVE-2023-46192 WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...

WordPress plugin Internal Link Building Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...

WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Internal Link Building Type Plugin Vulnerable versions = 1.2.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46193 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4692712a98eb Credits LEE SE HYOUNG...

WordPress Rocket Font Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Rocket Font Type Plugin Vulnerable versions = 1.2.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46067 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9555c55c78c5 Credits Abdi Pranata Required...

WordPress Plugin ldap-ad-staff-employee-directory-search Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An access control error vulnerabili...

CVE-2023-41616

A reflected cross-site scripting XSS vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload...

CVE-2023-41616

A reflected cross-site scripting XSS vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload...

Student Management System Cross-Site Scripting Vulnerability

Student Management System is a simple web-based student management software from the individual developer Sk. Amir Hamza of Bangladesh. A cross-site scripting vulnerability exists in Student Management System v1.2.3 that could allow an attacker to execute arbitrary Javascript in the victim user's...

PT-2023-28975 · Nqptp · Nqptp

Name of the Vulnerable Software and Affected Versions: nqptp versions prior to 1.2.3 Description: The issue arises from crafted packets received on the control port, which could cause the program to crash. This occurs in the nqptp-message-handlers.c file. Recommendations: For versions prior to...

PT-2023-21111 · Nsthemes · Nsthemes Ns Coupon To Become Customer

Name of the Vulnerable Software and Affected Versions: NsThemes NS Coupon To Become Customer plugin versions prior to 1.2.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior...

WordPress BuddyForms Attach Post with Group Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software BuddyForms Attach Post with Group Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 9d4312fdd8bd Credits Rafie Muhammad...

WordPress Cozy Blocks Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Cozy Blocks Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer CozyThemes PSID 5480a1de59c0 Credits Rafie Muhammad Patchstack Required...