185 matches found
Robware RVTools Security Vulnerability
Robware RVTools is a virtual machine management tool organized by Robware. The software lists information about VMs, CPUs, memory, disks, partitions, networks, floppy drives, CD drives, snapshots, VMware tools, resource pools, clusters, ESX hosts, HBAs, Nics, switches, ports, distributed switches...
CVE-2023-41667
Cross-Site Request Forgery CSRF vulnerability in Ulf Benjaminsson WP-dTree plugin = 4.4.5 versions...
CVE-2023-41667
Cross-Site Request Forgery CSRF vulnerability in Ulf Benjaminsson WP-dTree plugin = 4.4.5 versions...
PT-2023-28037 · Ulf Benjaminsson · Wp-Dtree
Name of the Vulnerable Software and Affected Versions: Ulf Benjaminsson WP-dTree plugin versions = 4.4.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...
CVE-2023-41662
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ulf Benjaminsson WP-dTree plugin = 4.4.5 versions...
PT-2023-16687 · WordPress · Ai Chatbot
Name of the Vulnerable Software and Affected Versions: AI ChatBot WordPress plugin versions prior to 4.4.5 Description: The issue concerns the AI ChatBot WordPress plugin, which does not properly escape most of its settings before outputting them in the dashboard and lacks a proper CSRF check. Th...
WordPress plugin AI ChatBot 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress ChatBot Plugin <= 4.4.4 is vulnerable to Cross Site Scripting (XSS)
Software ChatBot Type Plugin Vulnerable versions = 4.4.4 Fixed in 4.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1011 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID b672166ed65f Credits Erwan LR Required privilege...
WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)
Software WP-dTree Type Plugin Vulnerable versions = 4.4.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47423 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d3bd04fbe505 Credits Justiice Required privilege...
ChatBot < 4.4.5 - Stored XSS via CSRF
The plugin does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing attackers to make a logged in admin set XSS payloads in them. Note: v4.4.5 fixed the CSRF issue, the lack of escaping was fixed in 4.5.1 and a separate iss...
ChurchCRM Cross-Site Scripting Vulnerability
ChurchCRM is an open source CRM system built for churches. churchCRM version 4.4.5 has a cross-site scripting vulnerability that can be exploited by attackers to launch an XSS attack by entering javascript code via the sHeader field...
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
CVE-2022-36137
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader...
Cross site scripting
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
Cross site scripting
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader...
PT-2022-23219 · Churchcrm · Churchcrm
Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.4.5 Description: The issue allows attackers to store XSS via location input sHeader. This enables potential malicious activities. Recommendations: For ChurchCRM version 4.4.5, as a temporary workaround, consider restrictin...
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
ChurchCRM 跨站脚本漏洞
ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 4.4.5 that stems from the presence of XSS, allowing an attacker to store XSS via Deposit Comment input...
