453 matches found
WordPress plugin Breeze Display 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-50422
Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.1.14...
CVE-2024-50422
CVE-2024-50422 affects Breeze (WordPress Breeze plugin) up to version 2.1.14. Root cause is broken/Missing Authorization due to incorrectly configured access control security levels. The issue enables unauthorized access to Breeze functionality. Patch guidance is to upgrade to Breeze 2.1.15 or la...
CVE-2024-50422 WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.1.14...
CVE-2024-50422 WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.1.14...
PT-2024-34196 · Cloudways · Cloudways Breeze
Name of the Vulnerable Software and Affected Versions: Cloudways Breeze versions 2.1.14 and earlier Description: The issue is related to a Missing Authorization vulnerability in Cloudways Breeze, which allows exploitation due to incorrectly configured access control security levels...
WordPress plugin Breeze 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2024-50431
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through = 2.1.14...
CVE-2024-50431
CVE-2024-50431 is a stored XSS vulnerability in the Breeze WordPress plugin (Cloudways Breeze). It affects Breeze versions up to 2.1.14. The underlying issue is improper input neutralization during web page generation. Patch information from Patchstack indicates the fix is in Breeze 2.1.15. The C...
CVE-2024-50431 WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through = 2.1.14...
CVE-2024-50431 WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through = 2.1.14...
WordPress plugin Breeze 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-34206 · Cloudways · Cloudways Breeze
Name of the Vulnerable Software and Affected Versions: Cloudways Breeze versions 2.1.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...
WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Felipe Alcantara Patchstack Alliance in WordPress Plugin Breeze versions = 2.1.14...
WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Breeze versions = 2.1.14...
WordPress Breeze Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)
Software Breeze Type Plugin Vulnerable versions = 2.1.14 Fixed in 2.1.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50431 Patch priority Low CVSS severity Low 5.9 Developer Cloudways PSID 40fce694a577 Credits Felipe Alcantara Filiplain Required privilege...
WordPress Breeze Plugin <= 2.1.14 is vulnerable to Broken Access Control
Software Breeze Type Plugin Vulnerable versions = 2.1.14 Fixed in 2.1.15 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-50422 Patch priority Low CVSS severity Low 5.3 Developer Cloudways PSID 56201dce935d Credits Rafie Muhammad Patchstack Required privile...
Flexense HTTP Server Denial Of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Flexense HTTP Server Denial Of Service', 'Description' = %q This module triggers a Denial of Service vulnerability in the Flexense HTTP server...
CVE-2023-49575
A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, in Sync Breeze Enterprise Server 10.4.18 version, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attacker to execute persistent XSS through /setupsmtp in smtpserver, smtpuser, smtppassword an...
