WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)

Software Donations Made Easy – Smart Donations Type Plugin Vulnerable versions = 4.0.12 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40664 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f2b34d09c3af...

CVE-2023-28622

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Trident Technolabs Easy Slider Revolution plugin = 1.0.0 versions...

CVE-2023-28622

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Trident Technolabs Easy Slider Revolution plugin = 1.0.0 versions...

Cross site scripting

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Trident Technolabs Easy Slider Revolution plugin = 1.0.0 versions...

CVE-2023-28622

CVE-2023-28622 affects the WordPress plugin Easy Slider Revolution (Trident Technolabs) ≤ 1.0.0. The issue is a Stored Cross-Site Scripting (XSS) vulnerability exploitable via the esrcpt_slider_allow_iframes_filter vector, with public references noting unpatched status prior to a fix in version 1...

CVE-2023-28622: Improper Neutralization of Input During Web Page Generation

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Trident Technolabs Easy Slider Revolution plugin = 1.0.0 versions...

WordPress plugin Easy Slider Revolution 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-21855 · Unknown · Easy Slider Revolution

Name of the Vulnerable Software and Affected Versions: Easy Slider Revolution plugin versions prior to 1.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can th...

CVE-2023-30747

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGem WooCommerce Easy Duplicate Product plugin = 0.3.0.0 versions...

CVE-2023-30747

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGem WooCommerce Easy Duplicate Product plugin = 0.3.0.0 versions...

CVE-2023-30747 WordPress WooCommerce Easy Duplicate Product Plugin <= 0.3.0.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGem WooCommerce Easy Duplicate Product plugin = 0.3.0.0 versions...

CVE-2023-30747

CVE-2023-30747 affects the WordPress plugin WooCommerce Easy Duplicate Product (WPGem) with versions

WordPress plugin WooCommerce Easy Duplicate Product Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-30747: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGem WooCommerce Easy Duplicate Product plugin = 0.3.0.0 versions...

CVE-2023-26587

Improper input validation for the IntelR Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper input validation for the IntelR Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-26587

Improper input validation for the IntelR Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-26587

Improper input validation for the IntelR Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-26587

The CVE-2023-26587 issue affects Intel® Easy Streaming Wizard software (all versions) and stems from improper input validation that could allow an authenticated, locally-present user to escalate privileges. The NVD/Red Hat/etc. records summarize a CVSS v3.1 base score of 7.8 (HIGH) with local acc...

WordPress Easy Cookie Law Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Easy Cookie Law Type Plugin Vulnerable versions = 3.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40198 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ac6d2b4205fe Credits Abdi Pranata Required...