com.github.httl:httl-struts (>=1.0.10, <=1.0.11), com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=1.5.0, <=1.5.2) +100 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.4.1)

org.apache.struts:struts2-core MAVEN version 2.3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.github.httl:httl-struts =1.0.10, =1.5.0, =1.5.0, =1.5.2 - org.apache.struts:struts2-apps...

com.googlecode.struts2-conversation:struts2-conversation-config-browser-extension (1.7.2), com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin (3.5.0) +47 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.7)

org.apache.struts:struts2-core MAVEN version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.googlecode.struts2-conversation:struts2-conversation-config-browser-extension 1.7.2 -...

org.apache.struts:struts2-apps (2.3.14.1), org.apache.struts:struts2-assembly (2.3.14.1) +38 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.14.1)

org.apache.struts:struts2-core MAVEN version 2.3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.struts:struts2-apps 2.3.14.1 - org.apache.struts:struts2-assembly 2.3.14.1 -...

com.github.umeshawasthi:struts2-jsr303-validation-plugin (1.0), de.grobmeier.json:jjson-struts2 (>=0.0.7, <=0.0.9) +39 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.15.2)

org.apache.struts:struts2-core MAVEN version 2.3.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.github.umeshawasthi:struts2-jsr303-validation-plugin 1.0 - de.grobmeier.json:jjson-struts2...

com.amazonaws.serverless:aws-serverless-java-container-struts2 (>=1.3.1, <=1.5.1), com.jgeppert.struts2:struts2-aws-lambda-support-plugin (1.2.0) +41 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.20)

org.apache.struts:struts2-core MAVEN version 2.5.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amazonaws.serverless:aws-serverless-java-container-struts2 =1.3.1, =3.0-alpha-48, =3.0-alpha-4...

com.amashchenko.struts2.actionflow:struts2-actionflow-plugin (2.3.0), com.amashchenko.struts2.actionflow:struts2-actionflow-showcase (2.3.0) +40 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.16.1)

org.apache.struts:struts2-core MAVEN version 2.3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amashchenko.struts2.actionflow:struts2-actionflow-plugin 2.3.0 -...

com.moomanow.web.struts:struts-moo-authentication-tag (>=0.0.9, <=0.0.12), com.moomanow.web.struts:struts-moo-select-tag (>=0.0.11, <=0.0.12) +39 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.2)

org.apache.struts:struts2-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.moomanow.web.struts:struts-moo-authentication-tag =0.0.9, =0.0.11, =0.0.9, =0.0.1, =0.0.4,...

org.apache.struts:struts2-apps (2.3.30), org.apache.struts:struts2-assembly (2.3.30) +40 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.30)

org.apache.struts:struts2-core MAVEN version 2.3.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.struts:struts2-apps 2.3.30 - org.apache.struts:struts2-assembly 2.3.30 -...

com.github.psyuhen:struts2-thymeleaf3-plugin (1.0.5.1-release), org.apache.struts:struts2-apps (2.3.32) +46 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.32)

org.apache.struts:struts2-core MAVEN version 2.3.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.github.psyuhen:struts2-thymeleaf3-plugin 1.0.5.1-release - org.apache.struts:struts2-apps 2.3....

CVE-2024-52398 WordPress CDI plugin <= 5.5.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Halyra CDI.This issue affects CDI: from n/a through 5.5.3...

WordPress CDI Plugin <= 5.5.3 is vulnerable to Arbitrary File Upload

Software CDI Type Plugin Vulnerable versions = 5.5.3 Fixed in 5.5.6 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52398 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID a3849d91bb27 Credits Joshua Chan Required privilege Shop manager...

CVE-2022-1933

The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting...

WordPress plugin CDI cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress CDI plugin <= 5.1.8 - Reflected Cross-Site-Scripting (XSS) vulnerability

Reflected Cross-Site-Scripting XSS vulnerability discovered by WordPress CDI plugin versions = 5.1.8. Solution Update the WordPress CDI plugin to the latest available version at least 5.1.9...

org.apache.struts:struts2-apps (2.3.28), org.apache.struts:struts2-assembly (2.3.28) +39 more potentially affected by CVE-2016-3082 via org.apache.struts:struts2-core (2.3.28)

org.apache.struts:struts2-core MAVEN version 2.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.struts:struts2-apps 2.3.28 - org.apache.struts:struts2-assembly 2.3.28 -...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-0785 Source advisory: GHSA-876P-4WGC-75RX...