PT-2024-22385 · WordPress · Wordpress Tag/Category Manager – Ai Autotagger

Name of the Vulnerable Software and Affected Versions: The WordPress Tag and Category Manager – AI Autotagger plugin for WordPress versions up to, and including, 3.13.0 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin...

WordPress Plugin AI Autotagger security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... WordPress Plugin WordPre...

Cross site scripting

Cross-site scripting XSS vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3091

Cross-site scripting XSS vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3092

SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3091

Cross-site scripting XSS vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3091

CVE-2008-3091 concerns a cross-site scripting (XSS) vulnerability in Drupal’s Taxonomy Autotagger module, affecting 5.x releases prior to 5.x-1.8. The issue allows remote-authenticated users with create or edit post permissions to inject arbitrary web script or HTML via unspecified vectors. The c...

CVE-2008-3092

SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3092

The CVE-2008-3092 entry concerns the Drupal Taxonomy Autotagger module (5.x) with versions before 5.x-1.8. The vulnerability is an SQL injection that remote authenticated users with create/edit post permissions can trigger via unspecified vectors, potentially allowing arbitrary SQL execution. Aff...

CVE-2008-3092: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3091: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to inject arbitrary web script or HTML via unspecified vectors...

Drupal Taxonomy Autotagger模块多个输入验证漏洞

BUGTRAQ ID: 30067 CNCAN ID：CNCAN-2008070704 Drupal Taxonomy Autotagger是一款Drupal产品中的标签处理模块。 Drupal Taxonomy Autotagger存在输入验证错误，远程攻击者可以利用漏洞进行SQL注入或跨站脚本攻击。 模块没有正确使用Drupal数据库API，并直接使用用户提供的数据进行查询，可导致恶意攻击者进行SQL注入攻击，另外限制部分值没有进行过滤，可导致跨站脚本攻击。 Drupal Taxonomy Autotagger 5.x-1.7 升级到最新版本：...

SA-2008-041 - Taxonomy autotagger - Multiple vulnerabilities

The Taxonomy Autotagger will automatically tag a post with terms from a vocabulary if the terms are found in the content of the post. The module does not properly use Drupal's database API and inserts values supplied by users directly into queries. This can be exploited by malicious users with th...