139 matches found
CVE-2023-4243 FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation
The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to execute code by installing...
WordPress FULL Customer Plugin <= 2.2.3 is vulnerable to Broken Access Control
Software FULL Customer Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.3 OWASP Top 10 A6: Security Misconfiguration Classification Broken Access Control CVE CVE-2023-4243 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 72dc4e55ce85 Credits Ramuel Gall Required privile...
Fedora: Security Advisory for sympa (FEDORA-2023-419ca55dd3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2016-4243
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
CVE-2022-4243
creationtimestamp| type| source ---|---|--- 2022-12-26 16:40:52+00:00| seen| https://t.me/cibsecurity/55355 2025-04-11 23:51:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11514...
CVE-2022-4243
The ImageInject WordPress plugin through 1.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-4243 ImageInject <= 1.17 - Admin+ Stored XSS
The ImageInject WordPress plugin through 1.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-4243 ImageInject <= 1.17 - Admin+ Stored XSS
The ImageInject WordPress plugin through 1.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-4243
The CVE-2022-4243 vulnerability affects the ImageInject WordPress plugin up to version 1.17, where certain settings are not properly sanitised/escaped. This allows stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite). Several sources (NV...
CVE-2021-4243
creationtimestamp| type| source ---|---|--- 2022-12-12 16:21:03+00:00| seen| https://t.me/cibsecurity/54295...
CVE-2021-4243
Removed by vendor...
Mageia: Security Advisory (MGASA-2013-0291)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4243
CVE-2020-4243 affects IBM Security Identity Governance and Intelligence (IGI) 5.2.6 Virtual Appliance. The root cause is that session tokens may not be invalidated after logout in IBM Security Access Request, allowing a remote attacker to potentially obtain sensitive information via MITM techniqu...
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4243)
Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The vulnerability concerns session not invalidated after Logout in IBM Security Access Request. Vulnerability Details CVEID: CVE-2020-4243 DESCRIPTION: IBM Security...
Ubuntu 16.04 LTS / 18.04 LTS : libbsd vulnerabilities (USN-4243-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4243-1 advisory. It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This...
Security Bulletin: A vulnerability in Apache Solr (lucene) affects IBM Operations Analytics - Log Analysis (CVE-2019-4243)
Summary A vulnerability on unrestricted access was addressed by IBM Operations Analytics - Log Analysis. Vulnerability Details CVEID: CVE-2019-4243 DESCRIPTION: CVSS Base score: 5.1 CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/159517 for the current score. CVSS...
CVE-2019-4243
CVE-2019-4243 affects IBM Operations Analytics - Log Analysis (Solr component) for versions 1.3.1–1.3.5. The vulnerability allows unauthorized disclosure by enabling access to files such as solrconfig.xml and could enable disruptive administrator actions due to unrestricted access. IBM's remediat...
