8640 matches found
GitLab Security Breach
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE, which stems from the fact tha...
CVE-2023-48746
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Reflected XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...
CVE-2023-48746
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Reflected XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Reflected XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...
CVE-2023-48746
CVE-2023-48746 affects the WordPress plugin Community by PeepSo (PeepSo Core) up to version 6.2.6.0, with a Reflected Cross-Site Scripting (XSS) vulnerability in Web Page Generation input handling. The root cause is improper input neutralization during page generation, enabling unauthenticated at...
CVE-2023-48746 WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Reflected XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...
CVE-2023-47850
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...
CVE-2023-47850
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...
CVE-2023-47850
CVE-2023-47850 affects the WordPress plugin Community by PeepSo – PeepSo Core up to version 6.2.2.0, with stored stored Cross-Site Scripting (XSS) arising from improper input neutralization during web page generation. Public details confirm the vulnerability and affected versions; PatchStack note...
PT-2023-30644 · Peepso · Peepso Community
Name of the Vulnerable Software and Affected Versions: PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles versions n/a through 6.2.2.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored...
WordPress Plugin Community by PeepSo Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...
Community by PeepSo < 6.2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Description The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via user avatars in all versions up to, and including, 6.2.2.0 due to insufficient input sanitization and output escaping on user supplie...
Community by PeepSo < 6.2.7.0 - Reflected Cross-Site Scripting
Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-49078
CVE-2023-49078 affects raptor-web, a CMS for game server communities. Version 0.4.4 is vulnerable to a reflected cross-site scripting (XSS) flaw where a user-controlled URL parameter is loaded into an internal template with autoescape disabled, enabling script execution for victims who click a cr...
Telegram’s Bans on Extremist Channels Aren't Really Bans
A WIRED analysis of more than 100 restricted channels shows these communities remain active, and content shared within them often spreads to channels accessible to the public...
PT-2023-8927 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 16.8.5 GitLab CE/EE versions 16.9 through 16.9.2 GitLab CE/EE versions 16.10 through 16.10.0 Description: An issue has been discovered in GitLab CE/EE, where a wiki page with a crafted payload may lead to a Stor...
This Week in Spring - 28 November, 2023
Hi, Spring fans! I hope everyone who celebrated Thanksgiving had a wonderful time. Did you indulge in too much turkey? Anyway, let's jump into this week's edition of This Week in Spring—a particularly special one for a couple of reasons. First, it's our first issue after the launch of Spring Boot...
WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)
Software Community by PeepSo Type Plugin Vulnerable versions = 6.2.6.0 Fixed in 6.2.7.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48746 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2840ecd15416 Credits Phd Required privilege...