Lucene search
+L

642 matches found

Cvelist
Cvelist
added 2024/02/01 11:17 a.m.32 views

CVE-2023-51514 WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeboxr Team CBX Bookmark & Favorite allows Stored XSS.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.13...

6.5CVSS6.6AI score0.00349EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/01 11:17 a.m.54 views

CVE-2023-51514

CVE-2023-51514 is a Stored XSS in the CBX Bookmark & Favorite WordPress plugin (cbxwpbookmark) affecting versions up to 1.7.13. Root cause: Improper neutralization of input during web page generation. Impact: stored script execution on affected sites. Remediation: patch available (Patched) in lat...

6.5CVSS6.7AI score0.00349EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/02/01 12:00 a.m.7 views

WordPress plugin CBX Bookmark & Favorite cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS6.1AI score0.00349EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/29 3:15 p.m.9 views

CVE-2023-7074

The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.8CVSS5.8AI score0.00329EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2024/01/29 2:44 p.m.37 views

CVE-2023-7074 WP Social Bookmark Menu <= 1.2 - Settings Update via CSRF

The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.7AI score0.00329EPSS
SaveExploits2References2
CVE
CVE
added 2024/01/29 2:44 p.m.49 views

CVE-2023-7074

The CVE refers to WP Social Bookmark Menu

8.8CVSS8.5AI score0.00329EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
added 2024/01/29 12:00 a.m.7 views

WordPress plugin WP SOCIAL BOOKMARK MENU security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.7AI score0.00329EPSS
SaveExploits2References3
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2024/01/17 1:34 p.m.25 views

Minor update (5) for Vivaldi Desktop Browser 6.5

Download Vivaldi The following improvements were made since the fourth 6.5 minor update: Bookmarks Thumbnail is sometimes lost VB-102214 Chromium Upgraded to 120.0.6099.238 CVE-2024-0517, CVE-2024-0518 and CVE-2024-0519 Crash When typing password VB-102835 Main photo byAkira Hojo...

8.8CVSS5.8AI score0.21697EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/01/10 12:00 a.m.9 views

PT-2024-13768 · Apache · Apache Answer

Name of the Vulnerable Software and Affected Versions: Apache Answer versions through 1.2.0 Description: The issue is related to a 'Race Condition' vulnerability due to improper synchronization when using shared resources. Normally, a user can only bookmark a question once, increasing the bookmar...

3.1CVSS3.5AI score0.00891EPSS
SaveExploits0References16
Patchstack
Patchstack
added 2024/01/08 12:00 a.m.20 views

WordPress WP Social Bookmark Menu Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Social Bookmark Menu Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-7074 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ca5c286b56c4 Credits Daniel Ruf...

8.8CVSS6.6AI score0.00329EPSS
SaveExploits2References2Affected Software1
WPVulnDB
WPVulnDB
added 2024/01/05 12:00 a.m.12 views

CBX Bookmark & Favorite < 1.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The CBX Bookmark & Favorite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and abov...

6.5CVSS5.9AI score0.00349EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/12/31 5:15 p.m.10 views

CVE-2023-7193

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an attack is rather high. The...

8.1CVSS4.7AI score0.00438EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/31 5:15 p.m.30 views

CVE-2023-7193

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an attack is rather high. The...

8.1CVSS0.00438EPSS
SaveExploits0References3
Prion
Prion
added 2023/12/31 5:15 p.m.22 views

Improper access control

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an attack is rather high. The...

4CVSS6.9AI score0.00438EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/31 4:31 p.m.10 views

CVE-2023-7193 MTab Bookmark Installation install.php access control

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an attack is rather high. The...

4.6CVSS6.7AI score0.00438EPSS
SaveExploits0References3
CVE
CVE
added 2023/12/31 4:31 p.m.88 views

CVE-2023-7193

Affected software: MTab Bookmark (versions up to 1.2.6). Vulnerability in the Installation component, specifically the public/install.php file, described as an access control error due to manipulation of unknown processing within that file. Impact is reported as improper access controls (critical...

8.1CVSS5.9AI score0.00438EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/12/31 4:31 p.m.43 views

CVE-2023-7193 MTab Bookmark Installation install.php access control

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an attack is rather high. The...

4.6CVSS8.3AI score0.00438EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/31 12:00 a.m.9 views

MTab Bookmark Access Control Error Vulnerability

MTab Bookmark is a clean cut powerful navigation site from MTab Inc. MTab Bookmark is a simple and powerful navigation site from MTab, which allows you to quickly add your favorite websites to your bookmarks. An access control error vulnerability exists in MTab Bookmark version 1.2.6 and classifi...

8.1CVSS6.8AI score0.00438EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/12/27 12:00 a.m.13 views

WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)

Software CBX Bookmark & Favorite Type Plugin Vulnerable versions = 1.7.13 Fixed in 1.7.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51514 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8b970dcc1144 Credits Ngô Thiên An ancorn from...

6.5CVSS6.5AI score0.00349EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.6 views

PT-2023-31849 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

3.3CVSS5.5AI score0.00391EPSS
SaveExploits0References7
Rows per page
Query Builder