CVE-2023-2726

CVE-2023-2726 affects Google Chrome/Chromium prior to 113.0.5672.126, where an attacker could bypass the install dialog by convincing a user to install a malicious web app via a crafted HTML page. This is described as an Inappropriate implementation in WebApp Installs, with Chromium security seve...

CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in versions prior to Brave 1.48.171, which stems from a download security check dialog that is not displayed to the user when saving a file...

CVE-2021-31711

Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to execute arbitrary code via the sortby parameter in the dialog.php file...

Description of the security update for Excel 2013: May 9, 2023 (KB5002384)

Description of the security update for Excel 2013: May 9, 2023 KB5002384 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see ​​Microsoft Common Vulnerabilities and Exposures CVE-2023-24953. Note: To apply this...

Rollout::UI 跨站脚本漏洞

Rollout::UI is a minimalist UI software from the fetlife community. A security vulnerability exists in Rollout::UI, which stems from the function name in the confirmation dialog not being properly escaped. An attacker could exploit this vulnerability to perform a cross-site scripting attack...

Malicious code in idcs-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f9e71c07d690c8293d57afe2530d560684f82b76c844f9904256c1d330fc5af The OpenSSF Package Analysis project identified 'idcs-dialog' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1207 Malicious code in idcs-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f9e71c07d690c8293d57afe2530d560684f82b76c844f9904256c1d330fc5af The OpenSSF Package Analysis project identified 'idcs-dialog' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2023-2990 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.107 Description: The issue is related to a directory traversal vulnerability in the /dialog/select media.php component of DedeCMS. This vulnerability is caused by incorrect restriction of the path name to a directory with...

WordPress Modal Dialog Plugin <= 3.5.14 is vulnerable to Cross Site Scripting (XSS)

Software Modal Dialog Type Plugin Vulnerable versions = 3.5.14 Fixed in 3.5.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-31071 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 29ef21377041 Credits LEE SE HYOUNG...

Mozilla Thunderbird Security Advisory (MFSA2023-15) - Mac OS X

Thunderbird is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context...

dialog-award.de Cross Site Scripting vulnerability OBB-3251129

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-24001

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yannick Lefebvre Modal Dialog plugin = 3.5.9 versions...

CVE-2023-24001

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yannick Lefebvre Modal Dialog plugin = 3.5.9 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yannick Lefebvre Modal Dialog plugin = 3.5.9 versions...

CVE-2023-24001

The CVE-2023-24001 entry concerns the WordPress Modal Dialog Plugin (versions

CVE-2023-24001 WordPress Modal Dialog Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yannick Lefebvre Modal Dialog plugin = 3.5.9 versions...

CVE-2023-24001 WordPress Modal Dialog Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yannick Lefebvre Modal Dialog plugin = 3.5.9 versions...

WordPress plugin Modal Dialog 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...