WordPress plugin Country Blocker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-17010 · WordPress · Country Blocker

Name of the Vulnerable Software and Affected Versions: Country Blocker plugin for WordPress versions up to, and including, 3.2 Description: The issue is related to Reflected Cross-Site Scripting via the ip parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2024-54226

Cross-Site Request Forgery CSRF vulnerability in karlkiesinger Country Blocker country-blocker allows Stored XSS.This issue affects Country Blocker: from n/a through = 3.2...

CVE-2024-54226 WordPress Country Blocker plugin <= 3.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Karl Kiesinger Country Blocker allows Stored XSS.This issue affects Country Blocker: from n/a through 3.2...

CVE-2024-54226

CVE-2024-54226 describes a CSRF to Stored XSS in the WordPress plugin Country Blocker (affected versions: up to 3.2, vendor: Karl Kiesinger). The entry indicates a high-severity issue (CVSS v3.1 base score 7.1) with potential stored cross-site script execution, and in the Wordfence context the vu...

CVE-2024-54226 WordPress Country Blocker plugin <= 3.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in karlkiesinger Country Blocker country-blocker allows Stored XSS.This issue affects Country Blocker: from n/a through = 3.2...

WordPress plugin Country Blocker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress Country Blocker plugin <= 3.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Country Blocker versions = 3.2...

EnGenius多款产品 注入漏洞

The EnGenius ENH1350EXT and others are an outdoor wireless access point from EnGenius. An injection vulnerability exists in several EnGenius products, which stems from a command injection due to incorrect operation of the parameter countryCode. The following products are affected: EnGenius...

CVE-2024-49262

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wepic Country Flags for Elementor allows Stored XSS.This issue affects Country Flags for Elementor: from n/a through 1.0.1...

CVE-2024-49262 WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wepic Country Flags for Elementor allows Stored XSS.This issue affects Country Flags for Elementor: from n/a through 1.0.1...

CVE-2024-49262 WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wepic Country Flags for Elementor allows Stored XSS.This issue affects Country Flags for Elementor: from n/a through 1.0.1...

CVE-2024-49262

CVE-2024-49262 affects the WordPress plugin Country Flags for Elementor (versions up to 1.0.1). The issue is an Stored XSS vulnerability caused by improper neutralization of input during web page generation, enabling an attacker to inject scripts that persist in pages served to users. Public sour...

WordPress plugin Country Flags for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2024-33401 · Unknown · Wepic Country Flags For Elementor

Name of the Vulnerable Software and Affected Versions: wepic Country Flags for Elementor versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. A...

WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Country Flags for Elementor versions = 1.0.1...

WordPress Country Flags for Elementor Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Country Flags for Elementor Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49262 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 383bf2477ff0 Credits João Pedro S Alcântara Kinor...

September 24, 2024—KB5043131 (OS Build 19045.4957) Preview

None None...

August 29, 2024—KB5041582 (OS Build 19045.4842) Preview

None None...

PT-2025-2542 · Wavlink · Wavlink Ac3000

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: A cross-site scripting xss vulnerability exists in the set lang CountryCode functionality of login.cgi. A specially crafted HTTP request can lead to a disclosure of sensitive information...