7 matches found
EUVD-2024-37586
Malicious code in bioql PyPI...
CVE-2024-38738
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Marian Kadanka Change From Email allows Stored XSS.This issue affects Change From Email: from n/a through 1.2.1...
CVE-2024-38738 WordPress Change From Email plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Marian Kadanka Change From Email allows Stored XSS.This issue affects Change From Email: from n/a through 1.2.1...
CVE-2024-38738
CVE-2024-38738 is a stored XSS in the WordPress Change From Email plugin affecting versions up to 1.2.1. The vulnerability arises from improper input neutralization during web page generation, enabling stored cross-site scripting. Public sources consistently reference Change From Email
PT-2024-28182 · Unknown · Change From Email
Name of the Vulnerable Software and Affected Versions: Change From Email versions 1.2.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...
WordPress Change From Email plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin Change From Email versions = 1.2.1...
WordPress Change From Email Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
Software Change From Email Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38738 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 281e9f01ebf2 Credits Cronus Required privilege Administrato...