24 matches found
CVE-2023-50835
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
EUVD-2023-35401
Malicious code in bioql PyPI...
EUVD-2023-55568
Malicious code in bioql PyPI...
CVE-2023-31072
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Praveen Goswami Advanced Category Template plugin = 0.1 versions...
CVE-2024-9425
The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's adtaximage shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2024-9425 Advanced Category and Custom Taxonomy Image <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_tax_image Shortcode
The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's adtaximage shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
PT-2024-39624 · WordPress · Advanced Category/Custom Taxonomy Image
Name of the Vulnerable Software and Affected Versions: Advanced Category and Custom Taxonomy Image plugin for WordPress versions up to, and including, 1.0.9 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied...
WordPress plugin Advanced Category and Custom Taxonomy Image 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
CVE-2023-50835
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
CVE-2023-50835
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
CVE-2023-50835 WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
CVE-2023-50835 WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
CVE-2023-50835
CVE-2023-50835 is a CSRF vulnerability in the Advanced Category Template. Red Hat’s entry confirms the issue affects the Advanced Category Template up to version 0.1 (no details on fixed version are provided in the connected doc). The CVSS data in the initial document indicates a high-severity co...
WordPress plugin Advanced Category Template Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Advanced Category Template Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-50835 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ad01de2c230d Credits Skalucy...
PT-2023-31666 · Unknown · Praveen Goswami Advanced Category Template
Name of the Vulnerable Software and Affected Versions: Praveen Goswami Advanced Category Template versions 0.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...
CVE-2023-31072
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Praveen Goswami Advanced Category Template plugin = 0.1 versions...
CVE-2023-31072
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Praveen Goswami Advanced Category Template plugin = 0.1 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Praveen Goswami Advanced Category Template plugin = 0.1 versions...