11 matches found
EUVD-2023-27956
Malicious code in bioql PyPI...
CVE-2023-23873
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Flector BBSpoiler plugin = 2.01 versions...
CVE-2023-23873
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Flector BBSpoiler plugin = 2.01 versions...
CVE-2023-23873
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Flector BBSpoiler plugin = 2.01 versions...
CVE-2023-23873 WordPress BBSpoiler Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Flector BBSpoiler plugin = 2.01 versions...
CVE-2023-23873 WordPress BBSpoiler Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Flector BBSpoiler plugin = 2.01 versions...
CVE-2023-23873
CVE-2023-23873 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin BBSpoiler (Flector BBSpoiler) with affected versions
PT-2023-19271 · Unknown · Flector Bbspoiler Plugin
Name of the Vulnerable Software and Affected Versions: Flector BBSpoiler plugin versions = 2.01 Description: A Stored Cross-Site Scripting XSS issue exists, allowing contributors and above to inject malicious scripts. Recommendations: For Flector BBSpoiler plugin versions = 2.01, update to a...
WordPress plugin BBSpoiler 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
BBSpoiler <= 2.01 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
WordPress BBSpoiler Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)
Software BBSpoiler Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23873 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4a837c2affda Credits István Márton Required privileg...