EUVD-2024-52149

Malicious code in bioql PyPI...

CVE-2024-24886

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Acowebs Product Labels For Woocommerce Sale Badges allows Stored XSS.This issue affects Product Labels For Woocommerce Sale Badges: from n/a through 1.5.3...

CVE-2024-53817

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n/a through = 1.5.8...

CVE-2024-53817

CVE-2024-53817 affects the WordPress plugin Product Labels For Woocommerce (Acowebs) and is caused by improper neutralization of special elements in SQL commands, enabling a blind SQL injection. Affected versions are 1.5.8 and earlier. The vulnerability is described as allowing Blind SQL Injectio...

CVE-2024-53817 WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Acowebs Product Labels For Woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n/a through 1.5.8...

CVE-2024-53817 WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n/a through = 1.5.8...

WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin Product Labels For Woocommerce versions = 1.5.8...

CVE-2024-24886

CVE-2024-24886 affects the WordPress plugin Product Labels For Woocommerce (Sale Badges). Connected sources confirm an authenticated Stored XSS via the badgeLabel parameter in versions up to 1.5.3. Patchstack lists the fix in version 1.5.4, with low CVSS v3.1 score around 5.9, and requires Shop M...