CVE-2024-0602

creationtimestamp| type| source ---|---|--- 2024-03-08 18:56:43+00:00| seen| https://t.me/ctinow/203521...

CVE-2024-0602

The CVE-2024-0602 entry concerns the YARPP – Yet Another Related Posts Plugin for WordPress. Affected: YARPP versions up to and including 5.30.9. Root cause: insufficient input sanitization and output escaping in admin settings, enabling Stored Cross-Site Scripting. Impact: authenticated attacker...

CVE-2024-0602 Yet Another Related Posts Plugin (YARPP) <= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings

The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Oracle Linux 9 : thunderbird (ELSA-2024-0602)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-0602 advisory. 115.7.0-1.0.1 - Update to 115.7.0 build1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...