CVE-2024-24928

CVE-2024-24928 affects the WordPress plugin Content Cards (versions up to 0.9.7). The issue is an unauthorized input handling flaw that enables Stored XSS via shortcode when rendering pages, due to insufficient input sanitization/output escaping by the plugin. The Wordfence vulnerability record f...

CVE-2024-24928 WordPress Content Cards Plugin <= 0.9.7 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arunas Liuiza Content Cards allows Stored XSS.This issue affects Content Cards: from n/a through 0.9.7...

WordPress Content Cards Plugin <= 0.9.7 is vulnerable to Cross Site Scripting (XSS)

Software Content Cards Type Plugin Vulnerable versions = 0.9.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24928 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6115f90df15e Credits Ngô Thiên An ancorn from VNPT-VCI Required...

CVE-2023-24928

CVE-2023-24928 relates to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The issue affects the PostScript/PCL6 printer driver components, enabling an attacker to remotely execute code by crafting data sent to a printer shared resource. The available c...

CVE-2023-24928 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

...

CVE-2023-24928 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

...

CVE-2022-24928

Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP...

CVE-2022-24928

Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP...

CVE-2022-24928

CVE-2022-24928 describes a security misconfiguration in Samsung’s RKP (kernel protection) mechanism prior to the SMR Mar-2022 Release 1. The root cause is a misconfiguration that leaves the system not protected by RKP. As a result, confidentiality, integrity, and availability can be affected on a...

CVE-2022-24928

Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP...

CVE-2021-24928

creationtimestamp| type| source ---|---|--- 2022-02-07 18:35:08+00:00| seen| https://t.me/cibsecurity/36952...

CVE-2021-24928 Rearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL Injection

The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the saveallorder AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to...

CVE-2021-24928

CVE-2021-24928 concerns the WordPress plugin “Rearrange Woocommerce Products” (versions before 3.0.8). The vulnerability arises from insufficient access controls in the save_all_order AJAX action and lack of validation/escaping for user input in SQL statements, enabling an authenticated user (e.g...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

CVE-2020-24928

The CVE-2020-24928 entry concerns PreMiD (through version 2.1.3). In the socketManager.ts module, a locally hosted Socket.IO web server (port 3020) is exposed to all origins, enabling access to sensitive Discord user information. This describes an insecure cross-origin configuration rather than a...