1044 matches found
CVE-2023-40206: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post plugin = 1.0.3 versions...
CVE-2023-32740
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kunal Nagar Custom 404 Pro plugin = 3.8.1 versions...
CVE-2023-32740
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kunal Nagar Custom 404 Pro plugin = 3.8.1 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kunal Nagar Custom 404 Pro plugin = 3.8.1 versions...
CVE-2023-32740 WordPress Custom 404 Pro Plugin <= 3.8.1 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kunal Nagar Custom 404 Pro plugin = 3.8.1 versions...
CVE-2023-32740 WordPress Custom 404 Pro Plugin <= 3.8.1 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kunal Nagar Custom 404 Pro plugin = 3.8.1 versions...
CVE-2023-32740
CVE-2023-32740 is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in WordPress plugin Custom 404 Pro, affected
WordPress plugin Custom 404 Pro 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-32740: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kunal Nagar Custom 404 Pro plugin = 3.8.1 versions...
Unable to access Storefront link using IP address
There is a requirement to access the Storefront URL using IP address. Accessing the URL as https:///Citrix/Storeweb throwserror "HTTP Error 404. The requested resource is not found." Accessing the URL using FQDN/baseURL as https://Storefront.domain.com/Citrix/Storeweb or...
"404 Not Found" Error When Accessing NetScaler Gateway index.html Page After NetScaler Upgrade
Following an NetScaler upgrade, attempting to access the Citrix Gateway index.html page results in a "404 Not Found" error...
Patchwork Hackers Target Chinese Research Organizations Using EyeShell Backdoor
Threat actors associated with the hacking crew known as Patchwork have been spotted targeting universities and research organizations in China as part of a recently observed campaign. The activity, according to KnownSec 404 Team, entailed the use of a backdoor codenamed EyeShell. Patchwork, also...
WordPress 404 to 301 Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)
Software 404 to 301 Type Plugin Vulnerable versions = 3.0.5 Fixed in 3.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 6886ba1d92bc Credits Rafie Muhammad Patchstack Required...
zandilac.com Cross Site Scripting vulnerability OBB-3486780
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-33276: Improper Neutralization of Input During Web Page Generation
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without...
CVE-2023-33276
The CVE-2023-33276 issue affects Gira KNX/IP-Router web interface versions 3.1.3683.0–3.3.8.0, where reflecting a non-existent path in the HTTP response without HTML encoding enables reflective cross-site scripting (XSS). Documented by multiple sources (e.g., Red Hat, PRion/PT Security) note the ...
archive.umt.edu Cross Site Scripting vulnerability OBB-3472856
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-2032
The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities...
CVE-2023-2032
The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities...
CVE-2023-2032
CVE-2023-2032 affects the Custom 404 Pro WordPress plugin (pre-3.8.1). Root cause: improper sanitization of database inputs leading to multiple SQL Injection vulnerabilities. Impact: high (CVE base score 9.8). Remediation: upgrade to version 3.8.1 or later; patches/projects indicate the issue is ...