16 matches found
CVE-2026-23791
creationtimestamp| type| source ---|---|--- 2026-06-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260603...
CVE-2025-23791
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mikakaltoft Horizontal Line Shortcode horizontal-line-shortcode allows Stored XSS.This issue affects Horizontal Line Shortcode: from n/a through = 1.0...
CVE-2025-23791
creationtimestamp| type| source ---|---|--- 2025-01-16 21:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7birnb32s...
CVE-2025-23791 WordPress Horizontal Line Shortcode Plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mikakaltoft Horizontal Line Shortcode horizontal-line-shortcode allows Stored XSS.This issue affects Horizontal Line Shortcode: from n/a through = 1.0...
CVE-2025-23791
CVE-2025-23791 : Stored XSS in Horizontal Line Shortcode for WordPress (Horizontal Line Shortcode plugin). Root cause: improper input neutralization during web page generation. CVE entry lists affected range as from n/a through 1.0 and assigns CVSS v3.1 base score 6.5 (Network, Low/Low/Low with U...
CVE-2024-23791
Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1...
CVE-2024-23791
Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1...
CVE-2024-23791 Unnecessary data is written to log if issues during indexing occurs
Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1...
CVE-2024-23791
CVE-2024-23791 affects OTRS in multiple lines: 7.0.X up to 7.0.48; 8.0.X up to 8.0.37; 2023.X up to 2023.1.1. Root cause: debug information is written into a log file during Elasticsearch index construction, enabling reading of sensitive information from articles. Impact: potential exposure of se...
CVE-2024-23791 Unnecessary data is written to log if issues during indexing occurs
Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1...
CVE-2023-23791
creationtimestamp| type| source ---|---|--- 2023-07-11 12:43:00+00:00| seen| https://t.me/cibsecurity/66339...
CVE-2023-23791
Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Menu plugin = 1.2.1 versions...
CVE-2023-23791
CVE-2023-23791 affects HasThemes HT Menu plugin for WordPress,
WordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software HT Menu Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23791 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4413b3296cb1 Credits István Márton Required...
CVE-2022-23791
creationtimestamp| type| source ---|---|--- 2023-03-14 12:54:00+00:00| seen| https://t.me/cibsecurity/59945...
CVE-2022-23791
CVE-2022-23791 affects Firmanet Software and Technology Customer Relation Manager. The issue is an improper neutralization of input during web page generation, enabling Cross-Site Scripting (XSS) in the CRM prior to version 2022.03.13. Affected component is the web page rendering path that proces...