WordPress Plugin Blocksy Companion 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

Blocksy Companion < 2.0.32 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

WordPress Blocksy Companion Plugin <= 2.0.31 is vulnerable to Cross Site Scripting (XSS)

Software Blocksy Companion Type Plugin Vulnerable versions = 2.0.31 Fixed in 2.0.32 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2392 Patch priority Low CVSS severity Low 6.5 Developer Creative Themes PSID bbd31df0e8be Credits Ngô Thiên An ancorn...

PT-2024-20176 · WordPress · Blocksy Companion

Name of the Vulnerable Software and Affected Versions: Blocksy Companion plugin for WordPress versions up to, and including, 2.0.31 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Newsletter widget due to insufficient input sanitization and output escaping on...

CVE-2024-2130

CVE-2024-2130 affects the CWW Companion WordPress plugin. It is a Stored XSS via the Module2 widget in versions up to 1.2.7 caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires contributor-level or higher authentication and can inject sc...

WordPress Plugin CWW Companion Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress CWW Companion Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)

Software CWW Companion Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2130 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 885abf006ca4 Credits Francesco Carlucci Require...

PT-2024-18852 · WordPress · Cww Companion

Name of the Vulnerable Software and Affected Versions: CWW Companion plugin for WordPress versions up to, and including, 1.2.7 Description: The issue is related to Stored Cross-Site Scripting via the Module2 widget due to insufficient input sanitization and output escaping on user-supplied...

SAP Companion Cross-Site Scripting Vulnerability

SAP Companion is a collaboration server for SAP from SAP Germany. SAP Companion suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicio...

CVE-2024-22129

SAP Companion - version 3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application...

CVE-2024-22129

SAP Companion - version 3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application...

Design/Logic Flaw

SAP Companion - version 3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application...

CVE-2024-22129 Cross-Site Scripting (XSS) vulnerability in SAP Companion

SAP Companion - version 3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application...

CVE-2024-22129

CVE-2024-22129 affects SAP Companion before version 3.1.38. The vulnerability is a cross-site scripting (XSS) issue via a URL parameter in the SAP Companion web interface, with potential exposure of sensitive data and minor impact to integrity. The root cause, as described in multiple sources, is...

CVE-2024-22129 Cross-Site Scripting (XSS) vulnerability in SAP Companion

SAP Companion - version 3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application...

SAP Companion 跨站脚本漏洞

SAP Companion is a collaboration server for SAP from SAP Germany. SAP Companion suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicio...

PT-2024-3872 · Sap · Sap Companion

Name of the Vulnerable Software and Affected Versions: SAP Companion versions prior to 3.1.38 Description: The issue is related to a URL with a parameter that could be vulnerable to an XSS attack. An attacker could send a malicious link to a user, potentially allowing the attacker to retrieve...

CVE-2024-24803

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPoperation Ultra Companion – Companion plugin for WPoperation Themes allows Stored XSS.This issue affects Ultra Companion – Companion plugin for WPoperation Themes: from n/a through 1.1.9...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPoperation Ultra Companion – Companion plugin for WPoperation Themes allows Stored XSS.This issue affects Ultra Companion – Companion plugin for WPoperation Themes: from n/a through 1.1.9...

CVE-2024-24803

CVE-2024-24803 affects the WordPress plugin Ultra Companion (WPoperation Themes). The vulnerability is a Stored XSS caused by improper neutralization of input during web page generation, impacting Ultra Companion – Companion plugin for WPoperation Themes up to version 1.1.9. A fixed version exist...