CVE-2024-3548 Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3548 Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3548

CVE-2024-3548 affects the WordPress plugin “WP Shortcodes Plugin — Shortcodes Ultimate” (versions prior to 7.1.2). The issue is that a parameter is not properly sanitized/escaped before being echoed in the page, resulting in a Reflected Cross-Site Scripting vulnerability that could target high-pr...

WordPress Shortcodes Ultimate Plugin < 7.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Shortcodes Ultimate Type Plugin Vulnerable versions 7.1.2 Fixed in 7.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3548 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8f430cc886fe Credits Dmitrii Ignatyev...

CVE-2024-4542

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-3548. Reason: This candidate was issued in error. Please use CVE-2024-3548 instead...

Oracle Linux 6 : kernel (ELSA-2020-3548)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3548 advisory. 2.6.32-754.33.1.OL6 - Update genkey bug 25599697 2.6.32-754.33.1 - message scsi: mptscsih: Fix read sense data size Tomas Henzl 1824907 2.6.32-754.32.1...

CVE-2023-3548

creationtimestamp| type| source ---|---|--- 2023-07-25 18:27:07+00:00| seen| https://t.me/cibsecurity/67249...

CVE-2023-3548

An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authentication attack...

CVE-2023-3548

CVE-2023-3548 affects Johnson Controls IQ Wifi 6 firmware versions prior to 2.0.2. The vulnerability is described as an improper restriction of excessive authentication attempts (CWE-307) that could allow an unauthorized user to gain account access via a brute-force authentication attack over the...

CVE-2023-3548 IQ Wifi 6

An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authentication attack...

SUSE CVE-2012-5239

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3548. Reason: This candidate is a reservation duplicate of CVE-2012-3548. Notes: All CVE users should reference CVE-2012-3548 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2022-3548

creationtimestamp| type| source ---|---|--- 2022-10-17 16:13:13+00:00| seen| https://t.me/cibsecurity/51567...

Oracle Linux 8 : kernel (ELSA-2021-3548)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-3548 advisory. - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested CVE-2021-3656 Jon Maloy 1985429 1985430 CVE-2021-3656 - KVM: SVM: add module param to control the SMI...

RHEL 8 : kernel (RHSA-2021:3548)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3548 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: SVM nested virtualization issue in KVM...

CentOS 8 : kernel (CESA-2021:3548)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:3548 advisory. - kernel: SVM nested virtualization issue in KVM AVIC support CVE-2021-3653 Note that Nessus has not tested for this issue but has instead relied only on the...

SUSE: Security Advisory (SUSE-SU-2012:0114-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0114-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0122-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3548

A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy inside the main function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...

CVE-2021-3548

The CVE-2021-3548 entry concerns the dmg2img tool. A buffer-size validation flaw in memcpy() within main() allows leaking memory layout information, which could be leveraged in a chain to reach code execution. This vulnerability affects dmg2img up to version 20170502, with no public exploit detai...