11 matches found
CVE-2025-31105
creationtimestamp| type| source ---|---|--- 2025-03-27 06:37:15+00:00| seen| https://t.me/cvedetector/21259...
CVE-2024-31105
Cross-Site Request Forgery CSRF vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5...
CVE-2024-31105
Cross-Site Request Forgery CSRF vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5...
CVE-2024-31105 WordPress Tax Rate Upload plugin <= 2.4.5 - CSRF leading to Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5...
CVE-2024-31105
CVE-2024-31105 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Tax Rate Upload that enables Reflected XSS. The entry lists affected software as Tax Rate Upload (n/a) up to version 2.4.5. Reported metrics (CVSS v3.1 base score 7.1, HIGH) indicate network attack vector,...
WordPress Tax Rate Upload Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
Software Tax Rate Upload Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31105 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 687c051f0fb1 Credits thiennv Required privilege...
CVE-2022-31105
creationtimestamp| type| source ---|---|--- 2022-07-13 02:31:40+00:00| seen| https://t.me/cibsecurity/46133...
CVE-2022-31105
Argo CD versions 0.4.0–2.2.11, 2.3.6–2.4.5 are affected by an improper certificate validation when connecting to OIDC providers, risking trust in a malicious provider. Patches were released in 2.2.11, 2.3.6, and 2.4.5. Upgrading to these patched releases (or newer) is the recommended fix. A parti...
CVE-2022-31105 Argo CD's certificate verification is skipped for connections to OIDC providers
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.4.0 and prior to 2.2.11, 2.3.6, and 2.4.5 is vulnerable to an improper certificate validation bug which could cause Argo CD to trust a malicious or otherwise untrustworthy OpenID Connect OIDC...
