9 matches found
CVE-2024-35705
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ciprian Popescu Block for Font Awesome allows Stored XSS.This issue affects Block for Font Awesome: from n/a through 1.4.4...
CVE-2024-35705
CVE-2024-35705 affects the WordPress plugin Block for Font Awesome. The issue is described as Improper Neutralization of Input During Web Page Generation (XSS) with Stored XSS as the impact. Affected software: Block for Font Awesome, versions from n/a up to and including 1.4.4. The connected Red ...
CVE-2024-35705 WordPress Block for Font Awesome plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ciprian Popescu Block for Font Awesome allows Stored XSS.This issue affects Block for Font Awesome: from n/a through 1.4.4...
WordPress Block for Font Awesome Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)
Software Block for Font Awesome Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35705 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f200d33498a5 Credits Ngô Thiên An ancorn from VNPT-V...
CVE-2022-35705
creationtimestamp| type| source ---|---|--- 2022-09-19 20:38:15+00:00| seen| https://t.me/cibsecurity/50062...
CVE-2022-35705
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability in MP4/file parsing that could allow code execution when a user opens a crafted file. Root cause: parsing a crafted file can read past allocated memory; exploitable with user int...
Adobe Bridge 11.x < 11.1.4 / 12.x < 12.0.3 Multiple Vulnerabilities (APSB22-49)
The version of Adobe Bridge installed on the remote Windows host is prior to 11.1.4 or 12.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-49 advisory. - Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Heap-based Buffer...
CVE-2020-35705
creationtimestamp| type| source ---|---|--- 2020-12-25 12:55:48+00:00| seen| https://t.me/cibsecurity/21300...
CVE-2020-35705
The CVE-2020-35705 entry affects Daybyday 2.1.0, where a stored XSS vulnerability exists in the New User screen via the Name parameter. The issue is documented across multiple feeds, with CVSSv3.1 base score 5.4 (MEDIUM) and CVSSv2 base score 3.5 (LOW) indicating the impact is limited to confiden...