CVE-2023-47850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...

CVE-2023-47850

CVE-2023-47850 affects the WordPress plugin Community by PeepSo – PeepSo Core up to version 6.2.2.0, with stored stored Cross-Site Scripting (XSS) arising from improper input neutralization during web page generation. Public details confirm the vulnerability and affected versions; PatchStack note...

PT-2023-30644 · Peepso · Peepso Community

Name of the Vulnerable Software and Affected Versions: PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles versions n/a through 6.2.2.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored...

PT-2023-30935

Name of the Vulnerable Software and Affected Versions Community by PeepSo – Social Network, Membership, Registration, User Profiles versions through 6.2.6.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which...

CVE-2023-48746: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Reflected XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...

CVE-2023-47850: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...

WordPress Plugin Community by PeepSo Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

Community by PeepSo < 6.2.7.0 - Reflected Cross-Site Scripting

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Community by PeepSo < 6.2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via user avatars in all versions up to, and including, 6.2.2.0 due to insufficient input sanitization and output escaping on user supplie...

CVE-2023-49078

CVE-2023-49078 affects raptor-web, a CMS for game server communities. Version 0.4.4 is vulnerable to a reflected cross-site scripting (XSS) flaw where a user-controlled URL parameter is loaded into an internal template with autoescape disabled, enabling script execution for victims who click a cr...

Telegram’s Bans on Extremist Channels Aren't Really Bans

A WIRED analysis of more than 100 restricted channels shows these communities remain active, and content shared within them often spreads to channels accessible to the public...

This Week in Spring - 28 November, 2023

Hi, Spring fans! I hope everyone who celebrated Thanksgiving had a wonderful time. Did you indulge in too much turkey? Anyway, let's jump into this week's edition of This Week in Spring—a particularly special one for a couple of reasons. First, it's our first issue after the launch of Spring Boot...

PT-2023-8927 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 16.8.5 GitLab CE/EE versions 16.9 through 16.9.2 GitLab CE/EE versions 16.10 through 16.10.0 Description: An issue has been discovered in GitLab CE/EE, where a wiki page with a crafted payload may lead to a Stor...

WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Community by PeepSo Type Plugin Vulnerable versions = 6.2.6.0 Fixed in 6.2.7.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48746 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2840ecd15416 Credits Phd Required privilege...

CVE-2023-39925

Cross-Site Request Forgery CSRF vulnerability in PeepSo Download Community by PeepSo plugin = 6.1.6.0 versions...

CVE-2023-39925

Cross-Site Request Forgery CSRF vulnerability in PeepSo Download Community by PeepSo plugin = 6.1.6.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in PeepSo Download Community by PeepSo plugin = 6.1.6.0 versions...

CVE-2023-39925

CVE-2023-39925 affects the PeepSo Community by PeepSo plugin for WordPress (versions ≤ 6.1.6.0). The vulnerability is a Cross-Site Request Forgery (CSRF) that can be triggered without authentication. Patch guidance from Patchstack: fixed in version 6.2.0.0. Severity per Patchstack shows low overa...

PT-2023-27159 · Peepso · Peepso Download Community

Name of the Vulnerable Software and Affected Versions: PeepSo Download Community by PeepSo plugin versions = 6.1.6.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...