PT-2024-35900 · Unknown · Random Banner

Name of the Vulnerable Software and Affected Versions: vinoth06 Random Banner versions 4.2.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Stored XSS, which means an attacker can inject...

CVE-2024-53787: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in M A Vinoth Kumar Random Banner random-banner allows Stored XSS.This issue affects Random Banner: from n/a through = 4.2.12...

WordPress plugin Random Banner has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Random Banner plugin <= 4.2.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Random Banner versions = 4.2.11...

CVE-2024-10682: Improper Neutralization of Input During Web Page Generation

The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg and removequeryarg without appropriate escaping on the URL in all versions up to, and including, 3.11.7. This makes it possible for unauthenticated...

WordPress plugin: Announcement & Notification Banner – Bulletin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

PHP < 8.1.31, 8.2.x < 8.2.26, 8.3.x < 8.3.14 Multiple Vulnerabilities - Linux

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

CVE-2024-52437

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-52437 WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-52437

CVE-2024-52437 affects the WordPress plugin Banner System (versions ≤ 1.0.0). It is a Missing Authentication for Critical Function vulnerability that allows Privilege Escalation . Public details identify the affected version range and the privilege-escalation impact; multiple sources (Wordfence I...

CVE-2024-52437 WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

PT-2024-16457

Name of the Vulnerable Software and Affected Versions The Announcement & Notification Banner – Bulletin plugin for WordPress versions up to, and including, 3.11.7 Description The issue is related to Reflected Cross-Site Scripting, which occurs due to the use of add query arg and remove query arg...

CVE-2024-52701

A stored cross-site scripting XSS vulnerability in the Configuration page of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter...

PT-2024-35277 · Unknown · Saul Morales Pacheco Banner System

Name of the Vulnerable Software and Affected Versions: Saul Morales Pacheco Banner System versions n/a through 1.0.0 Description: The issue is related to a Missing Authentication for Critical Function vulnerability, which allows Privilege Escalation in the Saul Morales Pacheco Banner System...

WordPress plugin Saul Morales Pacheco has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A security...

CVE-2024-52437: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-52701: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Configuration page of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter...

CVE-2024-52701

Piwigo version v14.5.0 is susceptible to a stored cross-site scripting (XSS) vulnerability within the Configuration page . An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the Page banner parameter. This could result in the execution of malicious code on a...

PT-2024-35414 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 14.5.0 Description: A stored cross-site scripting XSS issue in the Configuration page allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter. This could potential...

CVE-2024-51816

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saul Morales Pacheco Banner System banner-system allows Stored XSS.This issue affects Banner System: from n/a through = 1.0.0...