CVE-2024-49323

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Sourav All in One Slider allows Reflected XSS.This issue affects All in One Slider: from n/a through 1.1...

CVE-2024-49323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahriar Alam All in One Slider all-in-one-slider allows Reflected XSS.This issue affects All in One Slider: from n/a through = 1.1...

CVE-2024-49323 WordPress All in One Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahriar Alam All in One Slider all-in-one-slider allows Reflected XSS.This issue affects All in One Slider: from n/a through = 1.1...

CVE-2024-49323 WordPress All in One Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahriar Alam All in One Slider all-in-one-slider allows Reflected XSS.This issue affects All in One Slider: from n/a through = 1.1...

CVE-2024-49323

CVE-2024-49323 is a reflected XSS in WordPress All in One Slider plugin, affecting versions n/a through 1.1. Root cause: improper neutralization of input during web page generation. Exploitation details are not provided in the initial doc, but Patchstack notes that unauthenticated access is requi...

WordPress plugin All in One Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-10055 Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcode

The Click to Chat – WP Support All-in-One Floating Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsaiosnapchat shortcode in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping on user supplied attributes...

WordPress All in One Slider Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software All in One Slider Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49323 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6a5a43d2e17c Credits João Pedro S Alcântara Kinorth...

WordPress Click to Chat – WP Support All-in-One Floating Widget Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Click to Chat – WP Support All-in-One Floating Widget Type Plugin Vulnerable versions = 2.3.3 Fixed in 2.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49281 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 953e712df67a Credits...

CVE-2024-47384

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Compress WP Compress – Image Optimizer All-In-One allows Reflected XSS.This issue affects WP Compress – Image Optimizer All-In-One: from n/a through 6.20.13...

Exploit for CVE-2024-9162

CVE-2024-9162 All-in-One WP Migration and Backup SELECT op...

Exploit for CVE-2022-2546

All-in-One WP Migration " Affect...

CVE-2024-43964

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in one for WP: from n/a through 4.5...

CVE-2024-43964

CVE-2024-43964 is a stored cross-site scripting vulnerability in the WordPress plugin DSGVO All in one for WP . According to the provided references, the issue arises from improper neutralization of input during web page generation, allowing stored XSS. Affected versions are listed as from n/a th...

CVE-2024-43964 WordPress DSGVO All in one for WP plugin <= 4.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in one for WP: from n/a through 4.5...

WordPress DSGVO All in one for WP Plugin <= 4.5 is vulnerable to Cross Site Scripting (XSS)

Software DSGVO All in one for WP Type Plugin Vulnerable versions = 4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43964 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7d6d328e43e7 Credits Ngô Thiên An ancorn from VNPT-VCI...

Webinar: Experience the Power of a Must-Have All-in-One Cybersecurity Platform

Let's be honest. The world of cybersecurity feels like a constant war zone. You're bombarded by threats, scrambling to keep up with patches, and drowning in an endless flood of alerts. It's exhausting, isn't it? But what if there was a better way? Imagine having every essential cybersecurity tool...

CVE-2024-6629

The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video shortcode in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-6629

The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video shortcode in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress All-in-One Video Gallery plugin <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Video Shortcode vulnerability discovered by Webbernaut in WordPress Plugin All-in-One Video Gallery versions = 3.7.1...