Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content <= 0.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.6.8 due to insufficient input sanitization and output escaping...

WordPress Brave Popup Builder plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

CVE-2024-35655

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brave Brave Popup Builder allows Stored XSS.This issue affects Brave Popup Builder: from n/a through 0.6.9...

CVE-2024-35655

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brave Brave brave-popup-builder allows DOM-Based XSS.This issue affects Brave: from n/a through = 0.6.9...

CVE-2024-35655 WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brave Brave brave-popup-builder allows DOM-Based XSS.This issue affects Brave: from n/a through = 0.6.9...

CVE-2024-35655 WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brave Brave brave-popup-builder allows DOM-Based XSS.This issue affects Brave: from n/a through = 0.6.9...

PT-2024-26601 · Brave · Brave Popup Builder

Name of the Vulnerable Software and Affected Versions: Brave Popup Builder versions 0.6.8 through 0.6.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Brave Popup Builder...

WordPress plugin Brave Popup Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by savphill in WordPress Plugin Brave versions = 0.6.9...

WordPress Brave Popup Builder Plugin <= 0.6.9 is vulnerable to Cross Site Scripting (XSS)

Software Brave Popup Builder Type Plugin Vulnerable versions = 0.6.9 Fixed in 7.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35655 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 529027c4f5e6 Credits savphill Required privilege...

Brave Software: Brave Android: Incorrect URL Eliding in Brave Shields Pop Up

A vulnerability was discovered in the Brave Android browser where the URL was not properly elided from the front when displayed in the Brave Shields pop-up. This could have led to URL confusion or spoofing for users. The issue was not present in the desktop version of Brave...

Chrome Zero-Day Alert — Update Your Browser to Patch New Vulnerability

Google on Thursday released security updates to address a zero-day flaw in Chrome that it said has been actively exploited in the wild. Tracked as CVE-2024-4671, the high-severity vulnerability has been described as a case of use-after-free in the Visuals component. It was reported by an anonymou...

@brave/wallet-standard-brave (>=0.0.8 <=0.0.12), @oraichain/owallet-wallet-standard (>=0.1.0 <=0.1.1) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.58.0)

@solana/web3.js NPM version =1.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @brave/wallet-standard-brave =0.0.8, =0.1.0, =0.1.6, =0.1.10 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

Brave Android 1.65.114 Security Fixes

Fixed website title of last closed private tab being displayed as reported on HackerOne by thesur. Upgraded Chromium to 124.0.6367.60 — refer to Google Chrome advisories for inherited CVEs...

Brave Popup Builder < 0.6.6 - Unauthenticated Server-Side Request Forgery

Description The Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.6.5. This makes it possible for unauthenticated attackers to make web requests to...

CVE-2024-30453

Server-Side Request Forgery SSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.6.5...

CVE-2024-30453 WordPress Brave plugin <= 0.6.5 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.6.5...

CVE-2024-30453

CVE-2024-30453 is an SSRF vulnerability in Brave Popup Builder (WordPress plugin). Affected: Brave Popup Builder up to version 0.6.5. Patch status in the connected data indicates a fix was released after exposure.

PT-2024-23382 · Brave · Brave Popup Builder

Name of the Vulnerable Software and Affected Versions: Brave Popup Builder versions 0.6.5 and earlier Description: A Server-Side Request Forgery SSRF issue affects the Brave Popup Builder, allowing unauthorized access to internal resources. No information is provided about the estimated number of...

WordPress Plugin Brave 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...