442 matches found
CVE-2023-3667
CVE-2023-3667 describes a stored cross-site scripting (XSS) vulnerability in the Bit Assist WordPress plugin prior to version 1.1.9. The issue arises because the plugin does not sanitize and escape several settings, enabling high-privilege users (e.g., admins) to inject scripts even when unfilter...
CVE-2023-3667 Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting
The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-3667 Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting
The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress plugin Bit Assist 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-3667: Undefined Security Weakness
The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress Bit Assist Plugin < 1.1.9 is vulnerable to Cross Site Scripting (XSS)
Software Bit Assist Type Plugin Vulnerable versions 1.1.9 Fixed in 1.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3667 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1c9556717c81 Credits Dipak Panchal th3.d1pak Require...
Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. In the plugin's settings, click on...
Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. In the plugin's settings, click...
January 10, 2023—KB5022289 (OS Build 14393.5648)
None None...
January 10, 2023—KB5022286 (OS Build 17763.3887) - EXPIRED
None None...
February 28, 2023—KB5022913 (OS Build 22621.1344) Preview
None None...
ptassist.com Cross Site Scripting vulnerability OBB-3204696
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: IBM FlashSystem 840 and IBM FlashSystem V840, -AE1 models nodes are affected by vulnerabilities in Apache’s Struts library (CVE-2014-7809)
Summary Apache Struts could potentially allow a remote attacker to bypass security restrictions, caused by predictable tokens. Vulnerability Details CVEID:CVE-2014-7809 DESCRIPTION: Apache Struts could allow a remote attacker to bypass security restrictions, caused by predictable tokens. By sendi...
Security Bulletin: The IBM FlashSystem 840 and V840 product model number AE1 nodes are affected by vulnerabilities in Apache’s Struts library
Summary Security vulnerabilities have been discovered in Apache’s Struts library Vulnerability Details CVE-ID: CVE-2014-0112, CVE-2014-0094, & CVE-2014-0050 DESCRIPTION: FlashSystem 840 MTM 9840-AE1, and FlashSystem V840 MTMs 9846-AE1 and 9848-AE1 use the Apache Struts library. Struts is used onl...
The vulnerability of the remote access tool for VMware Workspace ONE Assist lies in its authentication procedures’ flaws, which allow attackers to bypass the authentication process and gain increased privileges.
The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain increased privileges...
The vulnerability of the remote access tool for VMware Workspace ONE Assist exists due to the lack of security measures taken to protect the website structure. This allows attackers to carry out XSS attacks.
The vulnerability of the remote access tool for VMware Workspace ONE Assist exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
The vulnerability of the remote access tool for VMware Workspace ONE Assist, related to lack of access control, allows a perpetrator to circumvent existing security restrictions and enhance their privileges.
The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and gain increased privileges...
The vulnerability of the remote access tool for VMware Workspace ONE Assist lies in the authentication procedures’ flaws, which allow attackers to escalate their privileges.
The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the remote access tool for VMware Workspace ONE Assist, related to improper session management, allows a malicious individual to gain unauthorized access to the application.
The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to improper session management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the application...
VMware Workspace One Assist Multiple Vulnerabilities (VMSA-2022-0028)
The VMware Workspace One Assist server running on the remote host is affected multiple vulnerabilities, including the following: - VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able ...