752 matches found
EyouCms 跨站脚本漏洞
EyouCms is an open source content management system CMS based on ThinkPHP. A cross-site scripting vulnerability exists in EyouCms version V1.6.1-UTF8-sp1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...
PT-2023-22548 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCms version 1.6.1-UTF8-sp1 Description: The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user's...
WordPress plugin Backend Localization 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
Insecure header validation in slim/psr7
Impact An attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An attacker that is able to control the header names that are passed to Slilm-Ps...
Code injection
slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An...
UBUNTU-CVE-2023-30536
slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An...
CVE-2023-30536 Insecure header validation in slim/psr7
slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An...
Slim psr7 安全漏洞
SLiM Simple Login Manager is a simple, lightweight and easily configurable login manager. A security vulnerability exists in Slim psr7 versions prior to 1.6.1, which originates from an attacker being able to include line breaks in header names and values...
PT-2023-9872 · Unknown · Turante Sandbox Theme
Name of the Vulnerable Software and Affected Versions: Turante Sandbox Theme versions up to 1.5.2 Description: A problematic issue was found in the Turante Sandbox Theme, affecting the sandbox body class function of the file functions.php. The manipulation of the page argument leads to cross-site...
CVE-2023-23994
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...
CVE-2023-23994 WordPress Auto Hide Admin Bar Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...
PT-2023-19343 · WordPress · Marcel Bootsman Auto Hide Admin Bar
Name of the Vulnerable Software and Affected Versions: Marcel Bootsman Auto Hide Admin Bar plugin versions = 1.6.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Marcel Bootsman Auto Hi...
CVE-2023-23977
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Team Heateor WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments plugin = 1.6.1 versions...
WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure
Software Zippy Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.6.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-26533 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 652b24a2c5be Credits Junsu Yeo Required privilege...
Halo 代码问题漏洞
Halo is a personal blogging system for individual developers. A security vulnerability exists in Halo v1.6.1 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted .md files...
Debian: Security Advisory (DLA-1213-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-H685-83W4-3PH3 iziModal Cross-site Scripting vulnerability
iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting XSS when handling untrusted modal titles. An attacker who is able to influence the field title when creating a iziModal instance is able to supply arbitrary html or javascript code that will be...
CVE-2023-0540
The GS Filterable Portfolio WordPress plugin before 1.6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attac...
WordPress plugin GS Filterable Portfolio 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
iziModal 跨站脚本漏洞
iziModal is an elegant, responsive, flexible and lightweight jQuery modal plugin. A security vulnerability exists in iziModal versions prior to 1.6.1, which stems from a cross-site scripting XSS attack when handling untrusted modal headers, and can be exploited to execute arbitrary HTML or...