16 matches found
EUVD-2023-48601
Malicious code in bioql PyPI...
EUVD-2022-33764
Malicious code in bioql PyPI...
CVE-2023-44242
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin = 1.3.54 versions...
CVE-2023-44242
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin = 1.3.54 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin = 1.3.54 versions...
CVE-2023-44242 WordPress Images Slideshow by 2J Plugin <= 1.3.54 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin = 1.3.54 versions...
CVE-2023-44242
CVE-2023-44242 affects 2J Slideshow Team Slideshow, Image Slider by 2J plugin (WordPress) version 1.3.54 to mitigate the vulnerability. No other products or exploitation details are provided in the documents.
PT-2023-29166 · 2J · 2J Slideshow Team Slideshow
Name of the Vulnerable Software and Affected Versions: 2J Slideshow Team Slideshow, Image Slider by 2J plugin versions = 1.3.54 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication and affects users with contributor or...
CVE-2023-44242: Improper Neutralization of Input During Web Page Generation
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin = 1.3.54 versions...
CVE-2020-36729
The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twojslideshowsetup' function called via the wpajaxtwojslideshowsetup AJAX action in versions up to, and including, 1.3.31. This makes it possible for authenticated attackers...
CVE-2020-36729 Slideshow, Image Slider by 2J <= 1.3.31 - Authorization Bypass
The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twojslideshowsetup' function called via the wpajaxtwojslideshowsetup AJAX action in versions up to, and including, 1.3.31. This makes it possible for authenticated attackers...
CVE-2020-36729
The CVE-2020-36729 case concerns the WordPress plugin 2J-SlideShow, vulnerable up to version 1.3.31 due to a missing capability check in the twoj_slideshow_setup function exposed via the wp_ajax_twoj_slideshow_setup AJAX action. This results in an authorization bypass where authenticated users (S...
CVE-2020-36729: Improper Authorization
The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twojslideshowsetup' function called via the wpajaxtwojslideshowsetup AJAX action in versions up to, and including, 1.3.31. This makes it possible for authenticated attackers...
CVE-2022-29426
Authenticated contributor or higher user role Reflected Cross-Site Scripting XSS vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin = 1.3.54 at WordPress...
Cross site scripting
Authenticated contributor or higher user role Reflected Cross-Site Scripting XSS vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin = 1.3.54 at WordPress...