1606 matches found
CVE-2024-53731
CVE-2024-53731 — Fintelligence Calculator WordPress plugin : A stored XSS vulnerability affects the WordPress plugin Fintelligence Calculator up to version 1.0.3, arising from improper input neutralization during web page generation. Technical details in Patchstack/Red Hat/ Red Canary indicators ...
CVE-2024-53731 WordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fintelligence Fintelligence Calculator fintelligence-calculator allows Stored XSS.This issue affects Fintelligence Calculator: from n/a through = 1.0.3...
CVE-2024-52495
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...
CVE-2024-52495
CVE-2024-52495 is an SQL Injection vulnerability in WordPress Distance Based Shipping Calculator (Eniture Technology). The Initial Description notes SQL Injection affecting Distance Based Shipping Calculator: from n/a through 2.0.21. Connected sources (Patchstack) indicate WordPress Distance Base...
CVE-2024-52495 WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...
WordPress plugin Fintelligence Calculator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
PT-2024-35840 · Unknown · Fintelligence Calculator
Name of the Vulnerable Software and Affected Versions: Fintelligence Calculator versions 1.0.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This occurs when the web pa...
PT-2024-35336 · Enituretechnology · Enituretechnology Distance Based Shipping Calculator
Name of the Vulnerable Software and Affected Versions: Eniture Technology Distance Based Shipping Calculator versions n/a through 2.0.21 Description: The issue involves an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This allows for SQL...
WordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Fintelligence Calculator versions = 1.0.3...
WordPress Fintelligence Calculator Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Fintelligence Calculator Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-53731 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5d294aa2e0bc Credits SOPROBRO Required privilege...
WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability
SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Distance Based Shipping Calculator versions = 2.0.23...
WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 is vulnerable to SQL Injection
Software Distance Based Shipping Calculator Type Plugin Vulnerable versions = 2.0.21 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-52495 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID c1821da89db4 Credits João Pedro S Alcântara Kinort...
Malicious code in rct-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d42a5f1b620b206b85fa553b60cc9f0bba3f0b16ab0d8ba57a635125fb3f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10773 Malicious code in rct-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d42a5f1b620b206b85fa553b60cc9f0bba3f0b16ab0d8ba57a635125fb3f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-51601
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...
CVE-2024-51601
CVE-2024-51601 is an SQL injection vulnerability in the WordPress plugin “Website price calculator” (versions n/a through 4.1) caused by improper neutralization of input in SQL queries. The issue allows unauthenticated or low-privilege users to manipulate the SQL command, leading to potential dat...
CVE-2024-51601 WordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...
CVE-2024-51601 WordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...
PT-2024-34743 · Unknown · Maksym Marko Website Price Calculator
Name of the Vulnerable Software and Affected Versions: Maksym Marko Website price calculator versions n/a through 4.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection in the...
WordPress plugin Website price calculator SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...