CVE-2024-38755: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Designinvento DirectoryPress allows SQL Injection.This issue affects DirectoryPress: from n/a through 3.6.10...

PT-2024-28196 · Unknown · Directorypress

Name of the Vulnerable Software and Affected Versions: DirectoryPress versions 3.6.10 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...

WordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin DirectoryPress versions = 3.6.10...

WordPress DirectoryPress Plugin <= 3.6.10 is vulnerable to SQL Injection

Software DirectoryPress Type Plugin Vulnerable versions = 3.6.10 Fixed in 3.6.11 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-38755 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID d658af932318 Credits Peng Zhou Required privilege Contributor Publish...

DirectoryPress – Business Directory And Classified Ad Listing < 3.6.8 - Reflected Cross-Site Scripting

Description The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 3.6.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2024-32567

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a through 3.6.7...

CVE-2024-32567

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a through 3.6.7...

CVE-2024-32567

CVE-2024-32567 is a Reflected XSS in DirectoryPress (DirectoryPress – Business Directory And Classified Ad Listing) for WordPress, caused by improper input neutralization during web page generation. Affected vendor/product: DirectoryPress, affected versions are up to 3.6.7 (from the initial descr...

CVE-2024-32567 WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a through 3.6.7...

CVE-2024-32567 WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a through 3.6.7...

WordPress Plugin Directory – Press Cross-Site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

PT-2024-24688

Name of the Vulnerable Software and Affected Versions DirectoryPress versions 3.6.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

CVE-2024-32567: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a through 3.6.7...

WordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin DirectoryPress versions = 3.6.7...

WordPress DirectoryPress Plugin <= 3.6.7 is vulnerable to Cross Site Scripting (XSS)

Software DirectoryPress Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32567 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b3b3b9f83549 Credits Yudistira Arya Required privilege...

WordPress DirectoryPress Plugin <= 3.6.2 is vulnerable to Broken Access Control

Software DirectoryPress Type Plugin Vulnerable versions = 3.6.2 Fixed in 3.6.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-37967 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f4392bc7ad6f Credits Abdi Pranata Required...