10 matches found
CVE-2022-37402
Stored Cross-site Scripting XSS vulnerability in AFS Analytics plugin = 4.18 versions...
MAL-2025-37402 Malicious code in typed_parameters (npm)
The package typedparameters was found to contain malicious code...
CVE-2021-37402
OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that is mishandled when the legacy dataretrieval endpoint has been enabled...
CVE-2022-37402
creationtimestamp| type| source ---|---|--- 2023-03-15 19:29:58+00:00| seen| https://t.me/cibsecurity/60069...
CVE-2022-37402 WordPress AFS Analytics Plugin <= 4.18 is vulnerable to Cross Site Scripting (XSS)
Stored Cross-site Scripting XSS vulnerability in AFS Analytics plugin = 4.18 versions...
CVE-2022-37402 WordPress AFS Analytics Plugin <= 4.18 is vulnerable to Cross Site Scripting (XSS)
Stored Cross-site Scripting XSS vulnerability in AFS Analytics plugin = 4.18 versions...
CVE-2022-37402
Summary: CVE-2022-37402 is a stored XSS vulnerability in the WordPress AFS Analytics plugin, affecting versions up to 4.18. The root cause is a stored cross-site scripting flaw in the plugin’s handling of input, enabling scripts to be saved and executed in a user’s browser. Impact (as described i...
CVE-2021-37402
creationtimestamp| type| source ---|---|--- 2021-07-22 20:36:57+00:00| seen| https://t.me/cibsecurity/26414...
CVE-2021-37402
OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that is mishandled when the legacy dataretrieval endpoint has been enabled...
CVE-2021-37402
OX App Suite is affected: versions before 7.10.3-rev32 and before 7.10.4-rev18 (i.e., 7.10.4-rev18 and earlier) are vulnerable. The issue is an XSS caused by mishandling binary data when the legacy dataretrieval endpoint is enabled, enabling an attacker-controlled payload to be reflected in user ...