51185 matches found
WordPress CLUEVO LMS, E-Learning Platform plugin <= 1.13.2 - Cross-Site Request Forgery to Module Deletion vulnerability
Cross-Site Request Forgery to Module Deletion vulnerability discovered by Peter Thaleikis in WordPress Plugin CLUEVO LMS, E-Learning Platform versions = 1.13.2...
Exploit for Improper Authentication in Projectsend
CVE-2024-11680 PoC Exploit This repository contains a Proof of...
GHSA-PQJ8-XHCX-PRXM pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints
binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery CSRF via the Flask endpoints...
CVE-2024-39163
binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery CSRF via the Flask endpoints...
DRUPAL-CONTRIB-2024-070
The Minify JS module allows a site administrator to minify all javascript files that exist in the site's code base and use those minified files on the front end of the website. Several administrator routes are unprotected against Cross-Site Request Forgery CRSF attacks...
CVE-2024-11813 Pulsating Chat Button <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Pulsating Chat Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.1. This is due to missing or incorrect nonce validation on the aminchatbuttonsettingspage function. This makes it possible for unauthenticated attackers to update...
CVE-2024-11813
CVE-2024-11813 affects the WordPress plugin Pulsating Chat Button (versions ≤ 1.3.6). The flaw is a Cross-Site Request Forgery that exploits missing nonce validation in amin_chat_button_settings_page(), allowing an unauthenticated attacker to trigger actions that update plugin settings and inject...
CVE-2024-10832
CVE-2024-10832 : Posti Shipping plugin for WordPress (versions ≤ 3.10.3) is vulnerable to Cross-Site Request Forgery due to missing/incorrect nonce validation in generate_notices_html. This CSRF can allow unauthenticated attackers to trigger actions that lead to stored XSS by convincing an admini...
CVE-2024-39163
binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery CSRF via the Flask endpoints...
CVE-2024-39163
The CVE-2024-39163 entry concerns binux/pyspider up to v0.3.10, with a Cross‑Site Request Forgery (CSRF) vulnerability through the Flask endpoints. Affected component: pyspider’s Flask endpoints (web UI). Root cause: CSRF exposure enabling state manipulation via Flask routes (details consistent a...
PT-2024-10084 · Drupal +1 · Drupal +1
Name of the Vulnerable Software and Affected Versions: Minify JS versions 0.0.0 through 3.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability in the Minify JS module of the Drupal CMS system. This vulnerability can be exploited by a remote attacker to perform ...
CVE-2024-41776 IBM Cognos Controller cross-site request forgery
IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
CVE-2024-41776
IBM Cognos Controller 11.0.0–11.0.1 is reported vulnerable to cross-site request forgery (CSRF), enabling an attacker to perform malicious actions trusted by authenticated users. The Red Hat and IBM notices confirm this CSRF issue and identify the affected product scope. Remediation is to apply I...
CVE-2024-53782
Cross-Site Request Forgery CSRF vulnerability in cmsaccount Photo Video Store photo-video-store allows Cross-Site Scripting XSS.This issue affects Photo Video Store: from n/a through = 21.07...
CVE-2024-53770
Cross-Site Request Forgery CSRF vulnerability in pbmacintyre RingCentral Communications rccp-free allows Stored XSS.This issue affects RingCentral Communications: from n/a through = 1.7.0...
CVE-2024-53781
Cross-Site Request Forgery CSRF vulnerability in homejunction SpatialMatch IDX spatialmatch-free-lifestyle-search allows Stored XSS.This issue affects SpatialMatch IDX: from n/a through = 3.0.9...
CVE-2024-53776
Cross-Site Request Forgery CSRF vulnerability in raphaelheide Donate Me donate-me allows Stored XSS.This issue affects Donate Me: from n/a through = 1.2.5...
CVE-2024-53769
Cross-Site Request Forgery CSRF vulnerability in lriaudel Custom Post Type to Map Store cpt-to-map-store allows Stored XSS.This issue affects Custom Post Type to Map Store: from n/a through = 1.1.0...