73 matches found
WordPress Google CSE plugin <= 1.0.7 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Google CSE versions = 1.0.7...
WPCS ( WordPress Custom Search ) <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Description The WPCS WordPress Custom Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-34418: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tech9logy Creators WPCS WordPress Custom Search allows Stored XSS.This issue affects WPCS WordPress Custom Search : from n/a through 1.1...
CVE-2024-34418
CVE-2024-34418 concerns Tech9logy Creators WPCS (WordPress Custom Search). The issue is a Stored XSS caused by improper neutralization of input during web page generation. Affects WPCS versions from not specified (n/a) up to 1.1. The connected Red Hat entry repeats the same description. Public de...
CVE-2024-34418 WordPress WPCS ( WordPress Custom Search ) plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tech9logy Creators WPCS WordPress Custom Search allows Stored XSS.This issue affects WPCS WordPress Custom Search : from n/a through 1.1...
PT-2024-25870 · WordPress · Wpcs
Name of the Vulnerable Software and Affected Versions: WPCS WordPress Custom Search versions 1.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS...
WordPress WPCS ( WordPress Custom Search ) plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin WPCS WordPress Custom Search versions = 1.1...
WordPress WPCS ( WordPress Custom Search ) Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
Software WPCS WordPress Custom Search Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34418 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 05f3192746c1 Credits Sharanabasappa Required...
WordPress Bing Custom Search for WordPress Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)
Software Bing Custom Search for WordPress Type Plugin Vulnerable versions = 2.4 Fixed in 2.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 487fa482beb5 Credits Rafie Muhammad...
SUSE CVE-2011-2979
Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which allows remote attackers to determine the existence of private group names via a custom search. NOTE: this vulnerability exists because of a CVE-2010-2756...
Forced Chrome extensions get removed, keep reappearing
In the continued saga of annoying search extensions we have a new end-of-level boss. Victims have been reporting browser extensions that were removed by Malwarebytes, but “magically” came back later. Since the victims also complained about the message saying their browser was "managed", we had a...
CVE-2022-26111
The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search or editing an existing/predefined search of the documents. The search components permit adding BeanShell expressions that result in Remote Code Execution in t...
Remote code execution
The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search or editing an existing/predefined search of the documents. The search components permit adding BeanShell expressions that result in Remote Code Execution in t...
CVE-2022-26111: Improper Neutralization of Special Elements used in an Expression Language Statement
The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search or editing an existing/predefined search of the documents. The search components permit adding BeanShell expressions that result in Remote Code Execution in t...
WordPress Bing Custom Search for WordPress plugin < 2.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bing Custom Search for WordPress plugin versions 2.4. Solution Update the WordPress Bing Custom Search for WordPress plugin to the latest available version at least 2.4...
WordPress Bing Custom Search for WordPress plugin < 2.4 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Bing Custom Search for WordPress plugin versions 2.4. Solution Update the WordPress Bing Custom Search for WordPress plugin to the latest available version at least 2.4...
WordPress custom-search-plugin plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. custom-search-plugin is a custom search plugin used in it. A cross-site scripting vulnerability exists in WordPress custom-search-plug...
CVE-2017-18494
The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues...
