CVE-2024-37304: Improper Neutralization of Input During Web Page Generation

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight...

CVE-2023-46625

Cross-Site Request Forgery CSRF vulnerability in DAEXT Autolinks Manager plugin = 1.10.04 versions...

CVE-2023-46625

Cross-Site Request Forgery CSRF vulnerability in DAEXT Autolinks Manager plugin = 1.10.04 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in DAEXT Autolinks Manager plugin = 1.10.04 versions...

CVE-2023-46625

CVE-2023-46625 is a CSRF vulnerability in the DAEXT Autolinks Manager WordPress plugin, affecting versions

CVE-2023-46625 WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in DAEXT Autolinks Manager plugin = 1.10.04 versions...

CVE-2023-46625 WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in DAEXT Autolinks Manager plugin = 1.10.04 versions...

CVE-2023-46625: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in DAEXT Autolinks Manager plugin = 1.10.04 versions...

WordPress Plugin Autolinks Manager Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-30123 · WordPress · Daext Autolinks Manager

Name of the Vulnerable Software and Affected Versions: DAEXT Autolinks Manager plugin versions = 1.10.04 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

Autolinks Manager < 1.10.05 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)

Software Autolinks Manager Type Plugin Vulnerable versions = 1.10.04 Fixed in 1.10.05 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46625 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d40ccdf98f29 Credits Skalucy...

WordPress plugin Autolinks cross-site request forgery vulnerability

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Autolinks has a cross-site request forgery vulnerability, which can be exploited by remote attackers to perform...

CVE-2022-1112

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

CVE-2022-1112

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

CVE-2022-1112

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

Cross site scripting

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

CVE-2022-1112 Autolinks <= 1.0.1 - Stored Cross-Site Scripting via CSRF

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

CVE-2022-1112

The CVE-2022-1112 entry concerns the WordPress Autolinks plugin (up to version 1.0.1) with a Stored Cross-Site Scripting flaw caused by missing CSRF protection and lack of sanitization/escaping when updating settings. The vulnerability could allow a logged-in administrator to be targeted via a CS...

WordPress plugin Autolinks 跨站脚本漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Autolinks has a cross-site request forgery vulnerability, which can be exploited by remote attackers to perform...