CVE-2025-3888

creationtimestamp| type| source ---|---|--- 2025-05-17 13:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpemg4qn3p2w...

CVE-2025-3888

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and including, 4.8.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

CVE-2025-3888 Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and including, 4.8.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

CVE-2025-3888

CVE-2025-3888 — Jupiter X Core (WordPress) stored XSS via inline SVG . The vulnerability affects Jupiter X Core versions up to and including 4.8.12, caused by insufficient input sanitization and output escaping for SVG content. An authenticated attacker with Contributor-level access or higher can...

CVE-2025-3888 Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and including, 4.8.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

WordPress Jupiterx Core plugin <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Inline SVG vulnerability discovered by stealthcopter in WordPress Plugin JupiterX Core versions = 4.8.12...

CVE-2024-3888 tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button shortcode in all versions up to, and including, 4.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-3888 tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button shortcode in all versions up to, and including, 4.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-3888

CVE-2024-3888 affects tagDiv Composer (td-composer) for WordPress; stored XSS via the button shortcode in all versions up to 4.8 due to insufficient input sanitization and output escaping of user attributes. Attack requires contributor-level auth or higher and can inject scripts on pages loaded b...

WordPress tagDiv Composer Plugin <= 4.8 is vulnerable to Cross Site Scripting (XSS)

Software tagDiv Composer Type Plugin Vulnerable versions = 4.8 Fixed in 4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3888 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 609d0460445f Credits Truoc Phan Required privileg...

openSUSE: Security Advisory for Golang Prometheus (SUSE-SU-2023:3888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 107.0.5304.106 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 107.0.5304.106. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop advisory. - Heap buffer overflow in Crashpad in Google Chrome on Android prior to...

CVE-2023-3888

creationtimestamp| type| source ---|---|--- 2023-07-25 12:28:23+00:00| seen| https://t.me/cibsecurity/67225...

CVE-2023-3888

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack may be...

CVE-2023-3888

CVE-2023-3888 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is in the /admin/admin-profile.php file, where manipulating the adminname parameter leads to a cross-site scripting (XSS) vulnerability. The description indicates the attack can be launched remotely and that the...

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1

23.1.2.1033-alt1 built April 4, 2023 Yandex Browser Team in task 317282 March 20, 2023 Yandex Browser Team - browser updated to 23.1.2 + High CVE-2022-4436: Use after free in Blink Media. + High CVE-2022-4437: Use after free in Mojo IPC. + High CVE-2022-4438: Use after free in Blink Frames. + Hig...

SUSE CVE-2022-3888

Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

OPENSUSE-SU-2022:10201-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 107.0.5304.110 boo1205221 CVE-2022-3885: Use after free in V8 CVE-2022-3886: Use after free in Speech Recognition CVE-2022-3887: Use after free in Web Workers CVE-2022-3888: Use after free in WebCodecs CVE-2022-3889: Type Confusion i...

Debian DSA-5275-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5275 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

[SECURITY] [DSA 5275-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5275-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 10, 2022 https://www.debian.org/security/faq -...