1478 matches found
PT-2024-36172 · Unknown · Justin Fletcher Role Includer
Name of the Vulnerable Software and Affected Versions: Justin Fletcher Role Includer versions n/a through 1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can...
WordPress Barter theme <= 1.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Barter versions = 1.6...
WordPress plugin Flash Show And Hide Box 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
WordPress plugin GDReseller 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
WordPress plugin NV Slider 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
PT-2024-34800 · Litefeel · Litefeel Flash Show/Hide Box
Name of the Vulnerable Software and Affected Versions: litefeel Flash Show And Hide Box versions 1.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...
DS Browsers allvideo.downloader.browser 安全漏洞
DS Browsers allvideo.downloader.browser DS Browsers Fast Video Downloader: Browser is a video downloader from DS Browsers. A security vulnerability exists in DS Browsers allvideo.downloader.browser Fast Video Downloader: Browser version 1.6-RC1 and earlier versions. An attacker can exploit this...
PT-2024-34766 · WordPress · Wp Easy Recipe
Name of the Vulnerable Software and Affected Versions: WP EASY RECIPE versions 1.6 and earlier Description: The issue involves improper handling of input during web page generation, leading to a Stored Cross-site Scripting XSS problem. This allows for Stored XSS attacks. Recommendations: For WP...
WordPress WP EASY RECIPE Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
Software WP EASY RECIPE Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51622 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2693b889c919 Credits SOPROBRO Required privilege Contributor...
PT-2024-33385 · WordPress · Buddypress Better Registration
Name of the Vulnerable Software and Affected Versions: BuddyPress Better Registration versions 1.6 and earlier BuddyPress Better Registration version 1.7 is not affected, as it contains the fix for the issue. Description: The issue is an Authentication Bypass Using an Alternate Path or Channel...
WordPress plugin BuddyPress Better Registration 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin Simple Membership After Login Redirection 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error...
PT-2024-32570 · WordPress · Simple Membership After Login Redirection
Name of the Vulnerable Software and Affected Versions: Simple Membership After Login Redirection versions 1.6 and earlier Description: A high-severity open redirection vulnerability has been identified, allowing URL redirection to untrusted sites. This issue affects the WordPress Simple Membershi...
WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin SKT Blocks versions = 1.6...
CVE-2024-45894
BlueCMS 1.6 suffers from Arbitrary File Deletion via the filename parameter in an /admin/database.php?act=del request...
CVE-2024-45894
BlueCMS 1.6 suffers from Arbitrary File Deletion via the filename parameter in an /admin/database.php?act=del request...
PT-2024-31842 · Bluecms · Bluecms
Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: The issue allows for Arbitrary File Deletion through the file name parameter in an "/admin/database.php?act=del" request. This flaw can be exploited to delete files arbitrarily. Recommendations: For BlueCMS...
BlueCMS 安全漏洞
BlueCMS is a content management system CMS based on PHP and MySQL. A security vulnerability exists in BlueCMS version 1.6, which originates from arbitrary file deletion via the filename parameter in the /admin/database.php?act=del request...
CVE-2024-45894
CVE-2024-45894 affects BlueCMS 1.6, enabling Arbitrary File Deletion via the file_name parameter in the /admin/database.php?act=del endpoint. The underlying issue is that the parameter allows deletions of arbitrary files, exposing potential file-impact risks. Remediation guidance in the connected...
