CVE-2022-36873

Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device...

CVE-2022-36873

The vulnerability CVE-2022-36873 concerns Waterplugin’s GalaxyStoreBridgePageLinker prior to version 2.2.11.22081151, where an improper restriction of broadcasting Intent leaks the MAC address of the connected Bluetooth device. Affected component: Waterplugin (GalaxyStoreBridgePageLinker). Root c...

CVE-2021-36873

creationtimestamp| type| source ---|---|--- 2021-09-23 20:30:12+00:00| seen| https://t.me/cibsecurity/29332 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-36873.yaml...

CVE-2021-36873

CVE-2021-36873 affects WordPress plugin iQ Block Country (versions = 1.2.12). If upgrading is not feasible, apply mitigations per the patch sources. The connected documents confirm the vulnerability and the recommended fix; exploitation details are not provided beyond the general XSS description.

CVE-2021-36873 WordPress iQ Block Country plugin <= 1.2.11 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability in WordPress iQ Block Country plugin versions = 1.2.11. Vulnerable parameter: &blockcountryblockmessage...