9387 matches found
PT-2021-3318
Name of the Vulnerable Software and Affected Versions DSGVO All in one for WP versions prior to 4.0 Description The issue is related to the failure to neutralize special elements, which can lead to cross-site scripting XSS attacks. An unauthenticated attacker can exploit this by submitting...
WordPress 跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WP WordPress plugin DSGVO All in one before 4.0, which stems...
CVE-2021-24307: Deserialization of Untrusted Data
The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseotoolssettings" privilege most of the time admin to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup...
CVE-2021-24294: Improper Neutralization of Input During Web Page Generation
The dsgvoaiowritelog AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard wp-admin/admin.php?page=dsgvoaiofree-show-log. This could allow unauthenticate...
WordPress plugin cross-site scripting vulnerability (CNVD-2021-37473)
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in versions o...
Red Hat OpenShift GitOps 授权问题漏洞
Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. Red Hat OpenShift GitOps suffers from an authorization issue vulnerability that stems from argocd: ServiceAccount argocd-argocd-server...
PT-2021-6126
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16.10 Description The issue is related to a buffer overflow in the Linux kernel, which can be exploited by a remote attacker to execute arbitrary code. Certain binary files built around 2003, for example with GC...
CVE-2021-24326
CVE-2021-24326 concerns the WordPress plugin “All 404 Redirect to Homepage” (pre-1.21). The issue is an authenticated reflected Cross-Site Scripting (XSS) vulnerability in the tab parameter of the Settings page, where user input is not properly sanitized before being output inside an HTML attribu...
WordPress plugin 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in versions o...
PT-2021-15863
Name of the Vulnerable Software and Affected Versions All 404 Redirect to Homepage WordPress plugin versions prior to 1.21 Description The issue concerns an authenticated reflected Cross-Site Scripting XSS problem. It occurs because user input for the tab parameter on the settings page is not...
CVE-2021-24326: Improper Neutralization of Input During Web Page Generation
The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting XSS issue as user input was not properly sanitised before being output in an attribute...
CVE-2021-24287
The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...
CVE-2021-24287
The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...
CVE-2021-24287 Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)
The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...
PT-2021-15826
Name of the Vulnerable Software and Affected Versions Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin versions prior to 1.3.2 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the settings page of the plugin did...
SQL Injection Vulnerability in web management interface of Aifei Flow Control Route.
The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technology service, technology consulting, technology transfer, technology promotion and so on. SQL injection...
CVE-2021-24287: Improper Neutralization of Input During Web Page Generation
The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...
CVE-2021-31901
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...
