WordPress Elementor Addon Elements Plugin <= 1.12.12 is vulnerable to Local File Inclusion

Software Elementor Addon Elements Type Plugin Vulnerable versions = 1.12.12 Fixed in 1.13 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-1358 Patch priority Low CVSS severity Low 8.8 Developer WPVibes PSID 7c75b4731d57 Credits wesley wcraft Required privilege...

WordPress Elementor Addon Elements Plugin <= 1.12.12 is vulnerable to Cross Site Scripting (XSS)

Software Elementor Addon Elements Type Plugin Vulnerable versions = 1.12.12 Fixed in 1.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1393 Patch priority Low CVSS severity Low 6.5 Developer WPVibes PSID ccd1d4164264 Credits Nikolas Required...

CVE-2024-26491

A cross-site scripting (XSS) vulnerability exists in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 . The root cause is the improper neutralization of input during web page generation, specifically allowing attackers to inject a crafted payload into the Gallery ...

CVE-2024-26490: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...

CVE-2024-26491

A cross-site scripting XSS vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Gallery name text field...

flusity CMS Security Vulnerability

flusity CMS is a user interaction interface solution that can be easily changed or added to code. A security vulnerability exists in flusity CMS version v2.33, which originates from a cross-site request forgery CSRF vulnerability in component /cover/addons/infomediagallery/action/editaddonpost.ph...

PT-2024-19668

Name of the Vulnerable Software and Affected Versions Flusity-CMS version 2.33 Description A Cross-Site Request Forgery CSRF issue was discovered in Flusity-CMS. The issue is related to the component "/cover/addons/info media gallery/action/edit addon post.php". Recommendations For Flusity-CMS...

CVE-2024-26490

A cross-site scripting XSS vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...

CVE-2024-26490

A cross-site scripting (XSS) vulnerability exists in the Addon JD Simple module of flusity-CMS v2.33 . This flaw arises from the improper neutralization of input during web page generation, specifically allowing an attacker to inject a crafted payload into the Title text field . Successful exploi...

CVE-2024-26491

A cross-site scripting XSS vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Gallery name text field...

CVE-2024-26489

A verified XSS in flusity-CMS v2.33: the Addon JD Flusity 'Social block links' module allows crafting payloads in the Profile Name field to execute arbitrary web scripts/HTML. Concretely, affects flusity-CMS 2.33 and the vulnerable component is the Social block links addon; root cause is insuffic...

CVE-2024-26489

A cross-site scripting XSS vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field...

CVE-2024-26489: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field...

PT-2024-21405

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description A cross-site scripting XSS issue in the Addon JD Flusity 'Media Gallery with description' module allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Gallery nam...

PT-2024-21404

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description A cross-site scripting XSS issue in the Addon JD Simple module allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field. Recommendations For...

Critical: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.5 security and bug fix container updates

Red Hat Advanced Cluster Management for Kubernetes 2.8.5 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2024-24797

Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed – Essential Real Estate Add-On: from n/a through 1.3...

WordPress Plugin Premium Addons for Elementor Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Elementor Addon Elements < 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the linkto parameter in all versions up to, and including, 1.12.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Elementor Addon Elements Plugin <= 1.12.11 is vulnerable to Cross Site Scripting (XSS)

Software Elementor Addon Elements Type Plugin Vulnerable versions = 1.12.11 Fixed in 1.12.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0834 Patch priority Low CVSS severity Low 6.5 Developer WPVibes PSID 65cab16f462f Credits Webbernaut Required...