CVE-2024-3074

CVE-2024-3074 (Elementor ImageBox, WordPress): Stored XSS in the ImageBox widget across all versions up to 1.2.8 due to insufficient input sanitization and output escaping on user attributes. Exploitation requires contributor-level authentication; impact is script execution when users view inject...

WordPress Elementor ImageBox Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Elementor ImageBox Type Plugin Vulnerable versions = 1.2.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3074 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 931765c9091e Credits Etan Imanol Castro...

CVE-2018-3074

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5992...

CVE-2023-3074

creationtimestamp| type| source ---|---|--- 2023-06-02 22:37:38+00:00| seen| https://t.me/cibsecurity/64950 2025-01-08 20:15:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/828...

CVE-2023-3074

Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...

CVE-2023-3074 Cross-site Scripting (XSS) - Stored in tsolucio/corebos

Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...

CVE-2023-3074 Cross-site Scripting (XSS) - Stored in tsolucio/corebos

Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...

CVE-2023-3074

CVE-2023-3074 is a Cross-site Scripting (XSS) vulnerability that is stored in coreBOS (GitHub: tsolucio/corebos) prior to version 8. The available connected documents confirm the affected software is coreBOS and indicate the issue arises from stored XSS in user-controllable fields (e.g., contact ...

CVE-2023-3074 Cross-site Scripting (XSS) - Stored in tsolucio/corebos

Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...

SUSE CVE-2011-3074

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media...

CVE-2022-3074

The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks...

CVE-2022-3074 Slider Hero < 8.4.4 - Admin+ Stored Cross-Site Scripting

The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks...

CVE-2022-3074 Slider Hero < 8.4.4 - Admin+ Stored Cross-Site Scripting

The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks...

flipper-server (>=0.171.1 <=0.212.0), flipper-server-companion (>=0.171.0 <=0.212.0) +1 more potentially affected by unknown CVE via flipper-frontend-core (>=0.171.0 <=0.212.0)

flipper-frontend-core NPM version =0.171.0, =0.171.1, =0.171.0, =0.171.1, =0.212.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-3074...

Slackware: Security Advisory (SSA:2016-120-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 8 : nodejs:14 (RLSA-2021:3074)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3074 advisory. - The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the...

Mageia: Security Advisory (MGASA-2017-0143)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : nodejs:14 (ELSA-2021-3074)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3074 advisory. - Resolves CVE-2021-22918libuv, use system cipher list Tenable has extracted the preceding description block directly from the Oracle Linux security...

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2021-2071)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:3074-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...