CVE-2024-51802

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bread & Butter Bread & Butter bread-butter allows DOM-Based XSS.This issue affects Bread & Butter: from n/a through = 7.4.857...

CVE-2024-51802 WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bread & Butter Bread & Butter bread-butter allows DOM-Based XSS.This issue affects Bread & Butter: from n/a through = 7.4.857...

CVE-2024-51802 WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bread & Butter IO Inc. Bread & Butter allows DOM-Based XSS.This issue affects Bread & Butter: from n/a through 7.4.857...

CVE-2024-51802

CVE-2024-51802 is a DOM-based XSS vulnerability in the Bread & Butter WordPress plugin (Bread & Butter) affecting versions up to 7.4.857. The issue arises from improper neutralization of input during Web Page Generation, enabling cross-site scripting. Multiple connected sources (e.g., Red Hat adv...

WordPress plugin Bread & Butter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Bread & Butter versions = 7.4.857...

WordPress Bread & Butter Plugin <= 7.4.857 is vulnerable to Cross Site Scripting (XSS)

Software Bread & Butter Type Plugin Vulnerable versions = 7.4.857 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51802 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9da54844a736 Credits SOPROBRO Required privilege Contributor...

A week in security (April 02 – April 08)

Last week, we took a look at fake Whatsapp antics, dubious gaming extensions, and a huge Panera bread breach. There was also LockCrypt ransomware to contend with, we had a poke around Linkedin, and we published another Physician, protect thyself blog. Other news Compromised cash register systems...

Panera Bread Slammed After Sitting On Massive Data Leak For Eight Months

Panera Bread has shut down a massive data leak that revealed the information of potentially millions of customers via its website. The data was exposed for up to eight months after the company was first notified of the security threat. The incident has shed light on how organizations handle...

Our Daily Bread - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Our Daily Bread published at the 'play' market has multiple vulnerabilities...

Fixed XSS vulnerability at www.panerabread.com

Security researcher Rugburn, has submitted on 20/06/2009 a cross-site-scripting XSS vulnerability affecting www.panerabread.com, which at the time of submission ranked 10015 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2012. It is...

David Mortman on compliance, the changing job of the CSO and baking bread

Digital Underground podcast with Dennis Fisher In this episode of the Digital Underground podcast, Dennis Fisher talks with David Mortman, CSO-in-residence at Echelon One and longtime security executive, about whether we’ve become too reliant on compliance, the changing nature of the CSO’s job an...