Lucene search
K

91 matches found

Positive Technologies
Positive Technologies
added 2023/11/30 12:0 a.m.2 views

PT-2023-30789 · Codebard · Codebard Fast Custom Social Share

Name of the Vulnerable Software and Affected Versions: CodeBard Fast Custom Social Share versions through 1.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

5.9CVSS5.7AI score0.00135EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.1 views

WordPress Plugin Fast Custom Social Share by CodeBard Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

5.9CVSS5.9AI score0.00135EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2023/11/29 12:0 a.m.10 views

Fast Custom Social Share by CodeBard <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Description The Fast Custom Social Share by CodeBard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

5.9CVSS5.9AI score0.00135EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/11/23 12:0 a.m.8 views

WordPress Fast Custom Social Share by CodeBard Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Fast Custom Social Share by CodeBard Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48329 Patch priority Low CVSS severity Low 5.9 Developer Codebard PSID 238600f1202b Credits Bae Song Hyun Required...

5.9CVSS6.9AI score0.00135EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/11/22 6:15 p.m.8 views

CVE-2023-47765

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

8.8CVSS0.0007EPSS
Exploits0References1
OSV
OSV
added 2023/11/22 6:15 p.m.0 views

CVE-2023-47765

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

8.8CVSS7.3AI score0.0007EPSS
Exploits0References1
Prion
Prion
added 2023/11/22 6:15 p.m.10 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

6.8CVSS7.4AI score0.0007EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/22 6:12 p.m.66 views

CVE-2023-47765

CVE-2023-47765: Cross-Site Request Forgery in CodeBard’s Patron Button and Widgets for Patreon plugin (WordPress) &lt;= 2.1.9. Root cause: missing nonce validation enabling CSRF with unauthenticated attackers to forge actions. Affected versions:

8.8CVSS6.5AI score0.0007EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/22 6:12 p.m.12 views

CVE-2023-47765 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

4.3CVSS9.1AI score0.0007EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.1 views

WordPress Plugin CodeBard s Patron Button and Widgets for Patreon Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin CodeBard s...

8.8CVSS6.6AI score0.0007EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2023/11/17 12:0 a.m.14 views

CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Reflected XSS

Description The plugin does not sanitise and escape the cbp6tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6.3AI score0.00193EPSS
Exploits0Affected Software1
OSV
OSV
added 2023/11/14 10:15 p.m.0 views

CVE-2023-47524

Unauth. Reflected Cross-Site Scripting XSS vulnerability requires PHP 8.x in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

6.1CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/11/14 10:15 p.m.9 views

CVE-2023-47524

Unauth. Reflected Cross-Site Scripting XSS vulnerability requires PHP 8.x in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

6.1CVSS0.00193EPSS
Exploits0References1
Prion
Prion
added 2023/11/14 10:15 p.m.8 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability requires PHP 8.x in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

5.8CVSS6.2AI score0.00193EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/14 9:30 p.m.6 views

CVE-2023-47524 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability requires PHP 8.x in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

5.8CVSS5.9AI score0.00193EPSS
Exploits0References1
CVE
CVE
added 2023/11/14 9:30 p.m.30 views

CVE-2023-47524

CVE-2023-47524 affects CodeBard's Patron Button and Widgets for Patreon plugin for WordPress (

6.1CVSS5.9AI score0.00193EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.1 views

PT-2023-30484 · Codebard · Patron Button/Widgets For Patreon

Name of the Vulnerable Software and Affected Versions: CodeBard's Patron Button and Widgets for Patreon plugin versions = 2.1.9 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability requires PHP 8.x. Recommendations: For CodeBard's...

6.1CVSS6.2AI score0.00193EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.0 views

WordPress Plugin CodeBard s Patron Button and Widgets for Patreon Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin CodeBard s...

6.1CVSS6.6AI score0.00193EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/11/14 12:0 a.m.7 views

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software CodeBard's Patron Button and Widgets for Patreon Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47765 Patch priority Low CVSS severity Low 4.3 Developer Codebard PSID 8a59ce87622d...

8.8CVSS6.7AI score0.0007EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/07 12:0 a.m.10 views

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Software CodeBard's Patron Button and Widgets for Patreon Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47524 Patch priority High CVSS severity High 5.8 Developer Codebard PSID 00014dfb79a5...

6.1CVSS5.7AI score0.00193EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder