150 matches found
CVE-2024-29115
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through 1.5.5...
CVE-2024-29115 WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through 1.5.5...
CVE-2024-29115
CVE-2024-29115 is a Stored XSS vulnerability in Zaytech Smart Online Order for Clover (WordPress plugin). Connected sources confirm the issue affects the Clover plugin for Smart Online Order up to version 1.5.5 and describe an improper neutralization of input during web page generation leading to...
CVE-2024-29115 WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through 1.5.5...
PT-2024-22736 · Zaytech · Zaytech Smart Online Order For Clover
Name of the Vulnerable Software and Affected Versions: Zaytech Smart Online Order for Clover versions 1.5.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...
WordPress Plugin Smart Online Order for Clover Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Smart Online Order for Clover Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)
Software Smart Online Order for Clover Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29115 Patch priority Low CVSS severity Low 6.5 Developer Zaytech PSID 6678240ec919 Credits Ngô Thiên An ancorn from VNPT-VC...
clover.co.za Cross Site Scripting vulnerability OBB-3861061
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Smart Online Order for Clover < 1.5.5 - Reflected XSS
Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-46312
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zaytech Smart Online Order for Clover plugin = 1.5.4 versions...
CVE-2023-46312
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zaytech Smart Online Order for Clover plugin = 1.5.4 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zaytech Smart Online Order for Clover plugin = 1.5.4 versions...
CVE-2023-46312 WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zaytech Smart Online Order for Clover plugin = 1.5.4 versions...
CVE-2023-46312
CVE-2023-46312 is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the Zaytech Smart Online Order for Clover plugin (WordPress)
WordPress Plugin Smart Online Order for Clover Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2023-29954 · Zaytech · Zaytech Smart Online Order For Clover
Name of the Vulnerable Software and Affected Versions: Zaytech Smart Online Order for Clover plugin versions = 1.5.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website,...
cloverhillwines.com.au Cross Site Scripting vulnerability OBB-3769165
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
Software Smart Online Order for Clover Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.5.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46312 Patch priority High CVSS severity High 7.1 Developer Zaytech PSID 99ef88d7e47d Credits thiennv Require...
