Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18...

CVE-2023-51675

Open Redirect in Advanced Access Manager (AAM) plugin for WordPress (versions ≤ 6.9.18). The CVE CVE-2023-51675 indicates authenticated (Author+) exploit path, enabling redirection to an untrusted site. The Wordfence vulnerability entry notes the issue has been patched in newer releases (≤ 6.9.18...

CVE-2023-51675 WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18...

CVE-2023-51675 WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18...

CVE-2023-50881

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...

CVE-2023-50881

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...

CVE-2023-50881 WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...

CVE-2023-50881 WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...

CVE-2023-50881

CVE-2023-50881 is a Stored XSS vulnerability in the WordPress plugin Advanced Access Manager (AAM) – Restricted Content, Users & Roles, Enhanced Security and More, affecting up to version 6.9.15. Root cause is Improper Neutralization of Input During Web Page Generation. Public sources (Red Hat an...

PT-2023-31878 · WordPress · Aam Advanced Access Manager

Name of the Vulnerable Software and Affected Versions: AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More versions n/a through 6.9.18 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability...

WordPress Plugin Advanced Access Manager Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error vulnerability...

WordPress Plugin Advanced Access Manager Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection

Software Advanced Access Manager Type Plugin Vulnerable versions = 6.9.18 Fixed in 6.9.19 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2023-51675 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 56c8b177a6e3 Credits LVT-tholv2k Required privilege Autho...

WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Access Manager Type Plugin Vulnerable versions = 6.9.18 Fixed in 6.9.19 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51674 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d0b729b8e72c Credits LVT-tholv2k Required privile...

WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Access Manager Type Plugin Vulnerable versions = 6.9.15 Fixed in 6.9.16 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50881 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d6fc616194fa Credits Ngô Thiên An ancorn from...

Oracle Access Manager DoS (October 2023 CPU)

The version of Oracle Access Manager installed on the remote host is missing a security patch from the October 2023 CPU Advisory. It is, therefore, affected by denial of service vulnerability. Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Centralized...

Vulnerabilities fixed in Oracle Fusion Middleware

Vulnerabilities have been fixed in Oracle Fusion Middleware. A malicious party can exploit the vulnerabilities exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS Remote code execution Administrator/Root privileges Access to sensitive dat...

CVE-2022-1601

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible for attackers to access restricted content in certain situations...

CVE-2022-1601

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible for attackers to access restricted content in certain situations...