WordPress Meks Smart Social Widget Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Meks Smart Social Widget Type Plugin Vulnerable versions = 1.6 Fixed in 1.6.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25989 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b2f058eee5d5 Credits Muhammad Daf...

CVE-2023-3945

A vulnerability was found in phpscriptpoint Lawyer 1.6. It has been classified as problematic. This affects an unknown part of the file search.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235401 was assigned to this...

CVE-2023-3945

A vulnerability was found in phpscriptpoint Lawyer 1.6. It has been classified as problematic. This affects an unknown part of the file search.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235401 was assigned to this...

Cross site scripting

A vulnerability was found in phpscriptpoint Lawyer 1.6. It has been classified as problematic. This affects an unknown part of the file search.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235401 was assigned to this...

CVE-2023-3945

CVE-2023-3945 affects phpscriptpoint Lawyer 1.6, with the cross-site scripting vulnerability localized to the file search.php. Several connected sources describe that unknown functions in search.php enable remote XSS, impacting users who access the vulnerable page. The exact vulnerable component ...

CVE-2023-3944

A vulnerability was found in phpscriptpoint Lawyer 1.6 and classified as problematic. Affected by this issue is some unknown functionality of the file page.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235400...

Cross site scripting

A vulnerability was found in phpscriptpoint Lawyer 1.6 and classified as problematic. Affected by this issue is some unknown functionality of the file page.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235400...

CVE-2023-3944

Phpscriptpoint Lawyer 1.6 has a cross-site scripting vulnerability in an unknown functionality of page.php. The issue can be exploited remotely and affects page.php behavior; multiple sources (NVD/Red Hat and CVE records) confirm the vulnerability and lack of vendor response. Practical remediatio...

phpscriptpoint Lawyer 跨站脚本漏洞

Lawyer is a legal and attorney website by the phpscriptpoint team. A cross-site scripting vulnerability exists in phpscriptpoint Lawyer version 1.6, which stems from the presence of some unknown functions in page.php that lead to cross-site scripting...

PT-2023-26954 · Unknown · Phpscriptpoint Lawyer

Name of the Vulnerable Software and Affected Versions: phpscriptpoint Lawyer version 1.6 Description: A vulnerability was found in the file search.php, which can lead to cross site scripting. The manipulation can be initiated remotely. The vendor was contacted about this disclosure but did not...

CVE-2023-3859

A vulnerability was found in phpscriptpoint Car Listing 1.6 and classified as critical. This issue affects some unknown processing of the file /search.php of the component GET Parameter Handler. The manipulation of the argument...

CVE-2023-3858

A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument country/state/city leads to cross site scripting. The attack can be initiated remotely. VDB-235210 is t...

Sql injection

A vulnerability was found in phpscriptpoint Car Listing 1.6 and classified as critical. This issue affects some unknown processing of the file /search.php of the component GET Parameter Handler. The manipulation of the argument...

CVE-2023-3859

CVE-2023-3859 affects phpscriptpoint Car Listing 1.6. The vulnerability exists in the GET Parameter Handler for the file /search.php, where manipulation of the arguments brand_id, model_id, car_condition, car_category_id, body_type_id, fuel_type_id, transmission_type_id, year, mileage_start, mile...

PT-2023-26523 · Unknown · Phpscriptpoint Car Listing

Name of the Vulnerable Software and Affected Versions: phpscriptpoint Car Listing version 1.6 Description: A critical issue affects the processing of the file /search.php of the component GET Parameter Handler. The manipulation of the arguments brand id, model id, car condition, car category id,...

Carlisting 跨站脚本漏洞

Carlisting is a responsive car listing directory content management system CMS by the phpscriptpoint team. A cross-site scripting vulnerability exists in Carlisting version 1.6, which stems from unknown code in the file search.php, which leads to cross-site scripting via the parameters...

WordPress Spotlight Social Media Feeds Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)

Software Spotlight Social Media Feeds Type Plugin Vulnerable versions = 1.6 Fixed in 1.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 91b8b157c36a Credits Rafie Muhammad Patchstack...

Lawyer CMS 1.6 Cross Site Scripting

Exploit Title: Lawyer CMS 1.6 - Reflected XSS Exploit Author: CraCkEr Date: 16/07/2023 Vendor: phpscriptpoint Vendor Homepage: https://phpscriptpoint.com/ Software Link: https://demo.phpscriptpoint.com/lawyer/ Tested on: Windows 10 Pro Impact: Manipulate the content of the site Description The...

Carlisting 1.6 Cross Site Scripting

Exploit Title: Carlisting 1.6 - Reflected XSS Exploit Author: CraCkEr Date: 16/07/2023 Vendor: phpscriptpoint Vendor Homepage: https://phpscriptpoint.com/ Software Link: https://demo.phpscriptpoint.com/carlisting/ Tested on: Windows 10 Pro Impact: Manipulate the content of the site Description Th...

WordPress Animated Number Counters Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)

Software Animated Number Counters Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24393 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5aac80fb8728 Credits yuyudhn Required...