7 matches found
CVE-2024-37265
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60...
CVE-2024-37265
creationtimestamp| type| source ---|---|--- 2024-07-22 11:57:42+00:00| seen| https://t.me/cvedetector/1401...
CVE-2024-37265
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60...
CVE-2024-37265 WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60...
CVE-2024-37265 WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60...
CVE-2024-37265
CVE-2024-37265 is a WordPress vulnerability affecting the IdeaPush plugin (WordPress plugin for IdeaPush). The issue is described as stored Cross‑Site Scripting (Stored XSS) arising from improper neutralization during web page generation, allowing an authenticated user (Subscriber+) to inject scr...
WordPress IdeaPush Plugin <= 8.60 is vulnerable to Cross Site Scripting (XSS)
Software IdeaPush Type Plugin Vulnerable versions = 8.60 Fixed in 8.61 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37265 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6d3d6a921f11 Credits piro Required privilege Subscriber...