17 matches found
WordPress Similarity Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)
Software Similarity Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3972 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3941fac517e1 Credits Bob Matyas Required privilege...
WordPress Email Log Plugin <= 2.4.8 is vulnerable to Other Vulnerability Type
Software Email Log Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.4.9 OWASP Top 10 A3: Injection Classification Other Vulnerability Type CVE CVE-2024-0867 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 7750b3ba7ece Credits Sean Murphy Required privilege...
WordPress Tutor LMS Plugin <= 2.1.8 is vulnerable to Broken Access Control
Software Tutor LMS Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25799 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID c5a261a00ca9 Credits Rafie Muhammad Patchstack Require...
Fixed in Apache Tomcat 11.0.0-M6
Important: Information disclosure CVE-2023-34981 The fix for bug 66512 introduced a regression that was fixed as bug 66591. The regression meant that, if a response did not have any HTTP headers set, no AJP SENDHEADERS message would be sent which in turn meant that at least one AJP based proxy...
sailing360.com Cross Site Scripting vulnerability OBB-2625862
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
carterlake.org Cross Site Scripting vulnerability OBB-2625309
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
All Vulnerabilities for moodle.zstu.edu.pl Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| moodle.zstu.edu.pl ---|--- Open Bug...
aiguille.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1171104 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
ryukyujima.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1170687 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
kbfitness.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1170547 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
cn.makepolo.com XSS vulnerability
Open Bug Bounty ID: OBB-621754 Description| Value ---|--- Affected Website:| cn.makepolo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mairie-cormeray.fr XSS vulnerability
Open Bug Bounty ID: OBB-621537 Description| Value ---|--- Affected Website:| mairie-cormeray.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...
secure.youthscience.ca XSS vulnerability
Open Bug Bounty ID: OBB-621091 Description| Value ---|--- Affected Website:| secure.youthscience.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
giantgolf.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-566241 Description| Value ---|--- Affected Website:| giantgolf.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
nortea.no XSS vulnerability
Open Bug Bounty ID: OBB-565596 Description| Value ---|--- Affected Website:| nortea.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
yasaiclb.co.jp XSS vulnerability
Vulnerable URL: http://www.yasaiclb.co.jp/wp/wp-content/plugins/wp-password/login.php?err=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
ianketa.ru XSS vulnerability
Vulnerable URL: http://ianketa.ru/login/forgot/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 920953 VIP website status:| No Check ianketa.ru SSL connection:| Grade: F Coordinated...