CVE-2022-36120

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the getChartData administrative...

PT-2022-23208 · Blue Prism · Blue Prism Enterprise

Name of the Vulnerable Software and Affected Versions: Blue Prism Enterprise versions 6.0 through 7.01 Description: The issue allows an authenticated user to reverse engineer the software and circumvent access controls for the getChartData administrative function in a misconfigured environment th...

CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409 Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site Scripting

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin (versions up to 1.0.0) contains an authentication-restricted stored Cross-Site Scripting (XSS) vulnerability caused by improper escaping of chart data labels. This allows high-privilege users to execute XSS, even when unfiltered_html is disallowed; exploitation re...

WordPress plugin Rough Chart 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2022-16459 · WordPress · Rough Chart Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Rough Chart WordPress plugin versions through 1.0.0 Description: The issue concerns the Rough Chart WordPress plugin, which does not properly escape chart data labels. This could allow high-privilege users to perform Cross-Site Scripting...

Reflected XSS on conversion filter function

Description Fava v1.22 have a conversion filter function on income statement dashboard which allow user to perform XSS due to improper validation on filter conversion. Proof of Concept 1 Navigate to Fava demo instance https://fava.pythonanywhere.com/example-beancount-file/incomestatement/. 2 Filt...

WordPress Rough Chart plugin <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Siddhant Suresh Ughade in WordPress Rough Chart plugin versions = 1.0.0. Solution Deactivate and delete. This plugin has been closed as of July 14, 2022 and is not available for download. This closure is temporary, pending ...

MAL-2022-6734 Malicious code in ucs-multi-series-line-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae50640818d0dd907fe7a22c27ef0627f0c3f001c66d489e08a4a0c8702a9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ucs-multi-series-line-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae50640818d0dd907fe7a22c27ef0627f0c3f001c66d489e08a4a0c8702a9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ucs-availability-status-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bc5d01482d28fbd03e19503a03721a4fab429f0d86a0f2fcf2d17b4e6553aa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6730 Malicious code in ucs-availability-status-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bc5d01482d28fbd03e19503a03721a4fab429f0d86a0f2fcf2d17b4e6553aa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apex-chart-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d32cd53667dc0ab701e23650c529fd397e831ec601da7f90d3da95f906ae292b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1035 Malicious code in apex-chart-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d32cd53667dc0ab701e23650c529fd397e831ec601da7f90d3da95f906ae292b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfdc-abstract-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4fb0d0033264a928716326514774becd436c82d3a722325c147978b06c48fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfdc-empty-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc2d8b9c06b3b6ca1875897ebcf993a20d30c3d0c480503ac33251c1cc93aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6050 Malicious code in sfdc-empty-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc2d8b9c06b3b6ca1875897ebcf993a20d30c3d0c480503ac33251c1cc93aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...