Lucene search
+L

34 matches found

Patchstack
Patchstack
•added 2024/07/19 12:00 a.m.•27 views

WordPress CopySafe Web Protection Plugin <= 3.15 is vulnerable to Cross Site Scripting (XSS)

Software CopySafe Web Protection Type Plugin Vulnerable versions = 3.15 Fixed in 4.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38781 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d8ce0e7d373e Credits LVT-tholv2k Required...

7.1CVSS5.9AI score0.00308EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/07/05 1:46 p.m.•22 views

WordPress CopySafe Web Protection plugin <= 3.14 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin CopySafe Web Protection versions = 3.14...

6.5CVSS5.8AI score0.00313EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/07/05 12:00 a.m.•26 views

WordPress CopySafe Web Protection Plugin <= 3.14 is vulnerable to Cross Site Scripting (XSS)

Software CopySafe Web Protection Type Plugin Vulnerable versions = 3.14 Fixed in 3.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37514 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1f84aa9957ae Credits LVT-tholv2k Required privilege...

6.5CVSS5.8AI score0.00313EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/26 2:28 p.m.•14 views

CVE-2023-29098 WordPress CopySafe Web Protection Plugin <= 3.13 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ArtistScope CopySafe Web Protection plugin = 3.13 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/26 12:00 a.m.•7 views

CVE-2023-29098: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ArtistScope CopySafe Web Protection plugin = 3.13 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/26 12:00 a.m.•20 views

WordPress plugin CopySafe Web Protection: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2023/04/03 12:00 a.m.•15 views

CopySafe Web Protection < 3.14 - Unauthenticated Reflected XSS

The plugin does not properly sanitize and escape the file name in it's file uploads functionality before reflecting it back on the page, allowing an unauthenticated attacker to inject arbitrary web scripts via the filename of uploaded files...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2023/04/03 12:00 a.m.•22 views

WordPress CopySafe Web Protection Plugin <= 3.13 is vulnerable to Cross Site Scripting (XSS)

Software CopySafe Web Protection Type Plugin Vulnerable versions = 3.13 Fixed in 3.14 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29098 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cced9bcfbcba Credits Elliot...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2017/04/26 12:00 a.m.•12 views

WordPress Plugin CopySafe Web Protection Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. Cross-site request forgery exists in the CopySafe Web Protection plugin...

6.5CVSS6.7AI score0.00802EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2017/04/24 6:59 p.m.•14 views

CVE-2017-8100

There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings...

6.5CVSS5.8AI score0.00802EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2017/04/24 6:00 p.m.•38 views

CVE-2017-8100

There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings...

6.5AI score0.00802EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•8 views

CVE-2017-8100: Cross-Site Request Forgery (CSRF)

There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings...

6.5CVSS5.8AI score0.00802EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/04/24 12:00 a.m.•7 views

PT-2017-18115

Name of the Vulnerable Software and Affected Versions CopySafe Web Protection plugin versions prior to 2.6 Description The issue allows attackers to change plugin settings due to a CSRF problem. Recommendations For versions prior to 2.6, update to version 2.6 or later to resolve the issue...

6.5CVSS0.00802EPSS
SaveExploits1References5
WPVulnDB
WPVulnDB
•added 2017/03/09 12:00 a.m.•25 views

CopySafe Web Protection <= 2.5 - Cross-Site Request Forgery (CSRF)

The CopySafe Web Protection WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

4.3CVSS2.9AI score0.00802EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder