29 matches found
CVE-2023-24398 WordPress EZP Coming Soon Page Plugin <= 1.0.7.3 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Snap Creek Software EZP Coming Soon Page plugin = 1.0.7.3 versions...
CVE-2023-24398
CVE-2023-24398 affects the WordPress EZP Coming Soon Page plugin prior to version 1.0.7.4 (<=1.0.7.3). The vulnerability is an authenticated (admin+) Stored Cross-Site Scripting (XSS) in the plugin. Root cause: stored XSS under admin privileges, allowing injection that could affect site visito...
WordPress EZP Coming Soon Page Plugin <= 1.0.7.3 is vulnerable to Cross Site Scripting (XSS)
Software EZP Coming Soon Page Type Plugin Vulnerable versions = 1.0.7.3 Fixed in 1.0.7.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2023-24398 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 13532f24c9cc Credits Abdi Pranata...
CVE-2022-24398
Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be restricted...
CVE-2022-24398
SAP BusinessObjects BI Platform versions 4.2 (420) and 4.3 (430) are affected by an information disclosure vulnerability under certain conditions that can be exploited by an authenticated attacker to access restricted information. The issue is documented across multiple sources as CVE-2022-24398....
CVE-2021-24398
creationtimestamp| type| source ---|---|--- 2021-09-20 14:26:52+00:00| seen| https://t.me/cibsecurity/29090...
CVE-2021-24398
The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is...
CVE-2021-24398 Responsive 3D Slider <= 1.2 - Authenticated SQL Injection
The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is...
CVE-2021-24398
CVE-2021-24398 affects the WordPress plugin “Responsive 3D Slider” (plugins in the Morpheus Slider family) up to version 1.2. The vulnerability is an authenticated SQL injection in the Add new scene function where an id parameter is directly inserted into an SQL statement without sanitisation, es...