CVE-2024-13823 360 Product Rotation <= 1.5.8 - Reflected XSS

The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users...

CVE-2024-13823 360 Product Rotation <= 1.5.8 - Reflected XSS

The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users...

PT-2025-21465 · WordPress · 360 Product Rotation

Name of the Vulnerable Software and Affected Versions: 360 Product Rotation WordPress plugin versions 1.5.8 and earlier Description: The issue is related to a Reflected Cross-Site Scripting error. This occurs because a parameter is not properly sanitized and escaped before being outputted back in...

Securing Immersive 360 Video Streams through Attribute-Based Selective Encryption

Delivering high-quality, secure 360� video content introduces unique challenges, primarily due to the high bitrates and interactive demands of immersive media. Traditional HTTPS-based methods, although widely used, face limitations in computational efficiency and scalability when securing these...

CVE-2025-46509

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andrey Mikhalchuk 360 View 360-view allows Stored XSS.This issue affects 360 View: from n/a through = 1.1.0...

CVE-2025-39530

Cross-Site Request Forgery CSRF vulnerability in dsky Site Search 360 site-search-360 allows Stored XSS.This issue affects Site Search 360: from n/a through = 2.1.8...

WordPress 360 View plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by johska in WordPress Plugin 360 View versions = 1.1.0...

CVE-2025-46509

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andrey Mikhalchuk 360 View 360-view allows Stored XSS.This issue affects 360 View: from n/a through = 1.1.0...

CVE-2025-46509 WordPress 360 View plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andrey Mikhalchuk 360 View 360-view allows Stored XSS.This issue affects 360 View: from n/a through = 1.1.0...

CVE-2025-46509 WordPress 360 View <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andrey Mikhalchuk 360 View allows Stored XSS. This issue affects 360 View: from n/a through 1.1.0...

CVE-2025-46509

CVE-2025-46509 refers to a Stored XSS in the WordPress plugin 360 View, affecting versions up to 1.1.0. The issue stems from improper input handling during web page generation. Public references (NVD, CVE listing, PatchStack/Wordfence) indicate the vulnerability exists and that the plugin remains...

PT-2025-17815 · Andrey Mikhalchuk · 360 View

Name of the Vulnerable Software and Affected Versions: Andrey Mikhalchuk 360 View versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject...

WordPress plugin 360 View 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-39530

Cross-Site Request Forgery CSRF vulnerability in dsky Site Search 360 site-search-360 allows Stored XSS.This issue affects Site Search 360: from n/a through = 2.1.8...

CVE-2025-39530

CVE-2025-39530 refers to a CSRF-to-Stored-XSS vulnerability in the WordPress plugin “Site Search 360” (WordPress Site Search 360) affecting versions up to 2.1.7. The NVD entry and Red Hat advisory describe cross-site request forgery that enables stored XSS with a CVSS v3.1 base score of 7.1 (HIGH...

CVE-2025-39530 WordPress Site Search 360 plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) to stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dsky Site Search 360 site-search-360 allows Stored XSS.This issue affects Site Search 360: from n/a through = 2.1.8...

CVE-2025-39530 WordPress Site Search 360 plugin <= 2.1.7 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dsky Site Search 360 allows Stored XSS. This issue affects Site Search 360: from n/a through 2.1.7...

WordPress plugin Site Search 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Security Bulletin: IBM Match 360 vulnerable through IBM WebSphere Application Server Liberty being vulnerable to information disclosure (CVE-2023-50314)

Summary IBM Match 360 is vulnerable to information disclosure from IBM WebSphere Application Server Liberty. This is affecting IBM WebSphere Application Server Liberty versions 17.0.0.3 - 24.0.0.8. IBM WebSphere Application Server Liberty could allow an attacker with access to the network to...

Security Bulletin: IBM Match 360 is vulnerable to a denial of service from IBM WebSphere Application Server Liberty vulnerability found in Google Protocol Buffers (CVE-2024-7254)

Summary IBM Match 360 is vulnerable to a denial service from IBM WebSphere Application Server Liberty use of vulnerable Google Protocol Buffers. This affects IBM WebSphere Application Server Liberty 20.0.0.12 - 24.0.0.10 with the specified features enabled. Any project that parses untrusted...