96 matches found
CVE-2025-2340
A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the function saveOptions of the file /options/save of the component Site Settings. The manipulation of the argument Site Title leads to cross site scripting. The attack can be...
CVE-2025-2340
A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the function saveOptions of the file /options/save of the component Site Settings. The manipulation of the argument Site Title leads to cross site scripting. The attack can be...
CVE-2025-2340 otale Tale Blog Site Settings save saveOptions cross site scripting
A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the function saveOptions of the file /options/save of the component Site Settings. The manipulation of the argument Site Title leads to cross site scripting. The attack can be...
CVE-2025-2340 otale Tale Blog Site Settings save saveOptions cross site scripting
A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the function saveOptions of the file /options/save of the component Site Settings. The manipulation of the argument Site Title leads to cross site scripting. The attack can be...
CVE-2025-2340
Summary (CVE-2025-2340): A cross-site scripting flaw affects Tale Blog 2.0.5, specifically the Site Settings component: the function /options/save.saveOptions accepts a manipulated Site Title, enabling remote XSS. The vulnerability’s root cause is input handling in the Site Title argument, leadin...
CVE-2024-2340
creationtimestamp| type| source ---|---|--- 2024-05-09 07:39:55+00:00| seen| https://t.me/arpsyndicate/4935 2025-01-31 03:22:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3557...
CVE-2024-2340
The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.11.6 via the '/wp-content/uploads/fusion-forms/' directory. This makes it possible for unauthenticated attackers to extract sensitive data uploaded via an Avada created form with ...
WordPress Avada Theme <= 7.11.6 is vulnerable to Sensitive Data Exposure
Software Avada Type Theme Vulnerable versions = 7.11.6 Fixed in 7.11.7 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2340 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID bc2cd20cbb75 Credits Muhammad Zeeshan Xib3rR4dAr Require...
Advisory ROSA-SA-2024-2340
Software: openssh 7.4p1 OS: rosa-server79 packageevrstring: openssh-7.4p1-23.0.1.res7 CVE-ID: CVE-2023-51385 BDU-ID: 2023-08955 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the SSH protocol implementation of the OpenSSH cryptographic security tool is related to an argument injection or...
Amazon Linux 2 : kernel (ALAS-2023-2340)
The version of kernel installed on the remote host is prior to 4.14.328-248.540. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2340 advisory. 2024-06-06: CVE-2023-52477 was added to this advisory. A race condition between two functions, lmLogClose and txEn...
Oracle Linux 9 : libtiff (ELSA-2023-2340)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2340 advisory. - Fix CVE-2022-3970 - Resolves: CVE-2022-3970 - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627 Tenable has...
RHEL 9 : libtiff (RHSA-2023:2340)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2340 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: heap Buff...
CVE-2023-2340 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-2340 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-2340
CVE-2023-2340 is a stored Cross-site Scripting (XSS) vulnerability in pimcore/pimcore prior to version 10.5.21. The issue stems from inadequate user input sanitization in the grid/save logic, enabling injection of arbitrary JavaScript that can affect users’ browsers. Public references describe th...
CVE-2022-2340
creationtimestamp| type| source ---|---|--- 2022-07-25 16:33:05+00:00| seen| https://t.me/cibsecurity/46896...
CVE-2022-2340
CVE-2022-2340 — Affected: W-DALIL WordPress plugin (≤ 2.0). Description: non-sanitized/escaped fields allow Stored XSS when unfiltered_html is disallowed (e.g., multisite). Impact: potential for script execution by high-privilege authenticated users (admin). CVSS 3.1 base score 4.8 (Medium) with ...
openSUSE: Security Advisory for fwupdate (SUSE-SU-2022:2340-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2340 affecting package mysql for versions less than 8.0.28-1
CVE-2021-2340 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...