WordPress FULL Customer Plugin <= 2.2.3 is vulnerable to Broken Access Control

Software FULL Customer Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.3 OWASP Top 10 A6: Security Misconfiguration Classification Broken Access Control CVE CVE-2023-4243 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 72dc4e55ce85 Credits Ramuel Gall Required privile...

Fedora: Security Advisory for sympa (FEDORA-2023-419ca55dd3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2016-4243

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...

CVE-2022-4243

creationtimestamp| type| source ---|---|--- 2022-12-26 16:40:52+00:00| seen| https://t.me/cibsecurity/55355 2025-04-11 23:51:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11514...

CVE-2022-4243

The ImageInject WordPress plugin through 1.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-4243 ImageInject <= 1.17 - Admin+ Stored XSS

The ImageInject WordPress plugin through 1.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-4243 ImageInject <= 1.17 - Admin+ Stored XSS

The ImageInject WordPress plugin through 1.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-4243

The CVE-2022-4243 vulnerability affects the ImageInject WordPress plugin up to version 1.17, where certain settings are not properly sanitised/escaped. This allows stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite). Several sources (NV...

CVE-2021-4243

creationtimestamp| type| source ---|---|--- 2022-12-12 16:21:03+00:00| seen| https://t.me/cibsecurity/54295...

CVE-2021-4243

Removed by vendor...

CVE-2021-4243

...

Mageia: Security Advisory (MGASA-2013-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4243

CVE-2020-4243 affects IBM Security Identity Governance and Intelligence (IGI) 5.2.6 Virtual Appliance. The root cause is that session tokens may not be invalidated after logout in IBM Security Access Request, allowing a remote attacker to potentially obtain sensitive information via MITM techniqu...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4243)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The vulnerability concerns session not invalidated after Logout in IBM Security Access Request. Vulnerability Details CVEID: CVE-2020-4243 DESCRIPTION: IBM Security...

Ubuntu 16.04 LTS / 18.04 LTS : libbsd vulnerabilities (USN-4243-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4243-1 advisory. It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This...

Security Bulletin: A vulnerability in Apache Solr (lucene) affects IBM Operations Analytics - Log Analysis (CVE-2019-4243)

Summary A vulnerability on unrestricted access was addressed by IBM Operations Analytics - Log Analysis. Vulnerability Details CVEID: CVE-2019-4243 DESCRIPTION: CVSS Base score: 5.1 CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/159517 for the current score. CVSS...

CVE-2019-4243

CVE-2019-4243 affects IBM Operations Analytics - Log Analysis (Solr component) for versions 1.3.1–1.3.5. The vulnerability allows unauthorized disclosure by enabling access to files such as solrconfig.xml and could enable disruptive administrator actions due to unrestricted access. IBM's remediat...

CVE-2006-4243

creationtimestamp| type| source ---|---|--- 2019-11-06 07:38:16+00:00| seen| https://t.me/cibsecurity/7907 2024-02-05 07:46:46+00:00| seen| https://t.me/ctinow/179012...

CVE-2006-4243

linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code...

CVE-2006-4243

The CVE-2006-4243 entry concerns Linux-VServer: Linux Vserver 2.6.x before 2.6.17 suffers from a privilege-escalation flaw in the remount code. Several connected sources (Red Hat, CNVD, Ubuntu) corroborate that the vulnerability affects Linux Vserver prior to 2.6.17 and can enable elevation of pr...