CVE-2024-5439

The Blocksy theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the customurl parameter in all versions up to, and including, 2.0.50 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...

WordPress Blocksy theme <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Ngô Thiên An ancorn in WordPress Theme Blocksy versions = 2.0.50...

WordPress Blocksy Theme <= 2.0.50 is vulnerable to Cross Site Scripting (XSS)

Software Blocksy Type Theme Vulnerable versions = 2.0.50 Fixed in 2.0.51 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5439 Patch priority Low CVSS severity Low 6.5 Developer Creative Themes PSID 4b0639fc9299 Credits Ngô Thiên An ancorn Required...

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26256POC fofa:body="JIRA"&&body="2.0.50"...

SUSE CVE-2004-0748

modssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service CPU consumption by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop...

CVE-2004-0748

modssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service CPU consumption by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop...

PT-2004-1830 · Apache · Apache +1

Name of the Vulnerable Software and Affected Versions: Apache 2.x versions 2.0.44 through 2.0.50 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault or crash of an httpd child process. This occurs when the server is configured to allow...