CVE-2024-47117

IBM Carbon Design System Carbon Charts 0.4.0 through 1.13.16 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

PT-2024-32413 · Ibm · Ibm Carbon Design System

Name of the Vulnerable Software and Affected Versions: IBM Carbon Design System Carbon Charts versions 0.4.0 through 1.13.16 Description: The issue allows an authenticated user to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

Malicious code in eds-charts-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2510990d3cbd74d80350268baeb27e8b73568fb0e64f3c83fd061ad4eda6f565 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10962 Malicious code in eds-charts-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2510990d3cbd74d80350268baeb27e8b73568fb0e64f3c83fd061ad4eda6f565 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52814

Argo Helm is a collection of community maintained charts for argoproj.github.io projects. Prior to version 0.45.0, the workflow-role lacks granularity in its privileges, giving permissions to workflowtasksets and workflowartifactgctasks to all workflow Pods, when only certain types of Pods create...

CVE-2024-51862

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Baptiste Wicht Google Visualization Charts google-visualization-charts allows Stored XSS.This issue affects Google Visualization Charts: from n/a through = 0.1...

CVE-2024-51862

CVE-2024-51862 is a stored XSS in the WordPress plugin Google Visualization Charts (Baptiste Wicht) up to version 0.1. Root cause: improper input neutralization during web page generation. Impact per CVSS: Medium (6.5) with low confidentiality, integrity, and availability impacts; exploit require...

CVE-2024-51862 WordPress Google Visualization Charts plugin <= 0.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Baptiste Wicht Google Visualization Charts google-visualization-charts allows Stored XSS.This issue affects Google Visualization Charts: from n/a through = 0.1...

CVE-2024-51862 WordPress Google Visualization Charts plugin <= 0.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Baptiste Wicht Google Visualization Charts allows Stored XSS.This issue affects Google Visualization Charts: from n/a through 0.1...

WordPress plugin Google Visualization Charts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34992 · Google · Google Visualization Charts

Name of the Vulnerable Software and Affected Versions: Google Visualization Charts versions 0.1 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject malicious scripts into...

WordPress Google Visualization Charts plugin <= 0.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Google Visualization Charts versions = 0.1...

WordPress Google Visualization Charts Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)

Software Google Visualization Charts Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51862 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1b29248315f5 Credits SOPROBRO Required privilege...

Malicious code in eds-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48871e9d24d23d91ac9a6a1dcdd1bdeeddccd8afd09e38b55a5e02ad5136ea68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snp-design-system-charts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9857 Malicious code in snp-design-system-charts (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in snap-design-systm-charts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9850 Malicious code in snap-design-systm-charts (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress amCharts: Charts and Maps plugin <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery vulnerability

Reflected Cross-Site Scripting via Cross-Site Request Forgery vulnerability discovered by Krzysztof Zając in WordPress Plugin amCharts: Charts and Maps versions = 1.4.4...

WordPress amCharts: Charts and Maps Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

Software amCharts: Charts and Maps Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8622 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 73021204c003 Credits Krzyszto...