WordPress Property Hive Stamp Duty Calculator plugin <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Property Hive Stamp Duty Calculator versions = 1.0.22...

CVE-2024-11940 Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter

The Property Hive Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘price’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress plugin Property Hive Mortgage Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Property Hive Mortgage Calculator plugin <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via price Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Property Hive Mortgage Calculator versions = 1.0.6...

MAL-2024-11428 Malicious code in public-api-signature-calculator-example (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11267 Malicious code in @facetca/calculator (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @facetca/calculator (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-53731 WordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fintelligence Fintelligence Calculator fintelligence-calculator allows Stored XSS.This issue affects Fintelligence Calculator: from n/a through = 1.0.3...

CVE-2024-53731 WordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fintelligence Fintelligence Calculator fintelligence-calculator allows Stored XSS.This issue affects Fintelligence Calculator: from n/a through = 1.0.3...

CVE-2024-53731

CVE-2024-53731 — Fintelligence Calculator WordPress plugin : A stored XSS vulnerability affects the WordPress plugin Fintelligence Calculator up to version 1.0.3, arising from improper input neutralization during web page generation. Technical details in Patchstack/Red Hat/ Red Canary indicators ...

CVE-2024-52495

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

CVE-2024-52495

CVE-2024-52495 is an SQL Injection vulnerability in WordPress Distance Based Shipping Calculator (Eniture Technology). The Initial Description notes SQL Injection affecting Distance Based Shipping Calculator: from n/a through 2.0.21. Connected sources (Patchstack) indicate WordPress Distance Base...

CVE-2024-52495 WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

WordPress plugin Fintelligence Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

PT-2024-35336 · Enituretechnology · Enituretechnology Distance Based Shipping Calculator

Name of the Vulnerable Software and Affected Versions: Eniture Technology Distance Based Shipping Calculator versions n/a through 2.0.21 Description: The issue involves an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This allows for SQL...

PT-2024-35840 · Unknown · Fintelligence Calculator

Name of the Vulnerable Software and Affected Versions: Fintelligence Calculator versions 1.0.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This occurs when the web pa...

WordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Fintelligence Calculator versions = 1.0.3...

WordPress Fintelligence Calculator Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Fintelligence Calculator Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-53731 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5d294aa2e0bc Credits SOPROBRO Required privilege...

WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Distance Based Shipping Calculator versions = 2.0.23...

WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 is vulnerable to SQL Injection

Software Distance Based Shipping Calculator Type Plugin Vulnerable versions = 2.0.21 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-52495 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID c1821da89db4 Credits João Pedro S Alcântara Kinort...