WPFront User Role Editor < 4.1.0 - Limited Information Exposure

Description The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.1.11184 via the wpfrontuserroleeditorassignrolesuserautocomplete AJAX action. This makes it possible for authenticated attackers, with...

The vulnerability of the Vim text editor, related to integer overflow or bypassing, allows attackers to cause a service failure.

The vulnerability of the Vim text editor lies in the fact that the values used for the :s command are stored more than is necessary for a single long variable. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange, Inc. that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor, which originates from an out-of-bounds read vulnerability in the parsing of EMF files. An attacker could exploit this vulnerabili...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor, which originates from an out-of-bounds read vulnerability in the parsing of XPS files. An attacker could exploit this vulnerability to...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange, Inc. that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor, which originates from an out-of-bounds read vulnerability in the parsing of EMF files. An attacker could exploit this vulnerabili...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor, which originates from an out-of-bounds read vulnerability in the parsing of XPS files. An attacker could exploit this vulnerability to...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange, Inc. that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor, which originates from an out-of-bounds read vulnerability in the parsing of EMF files. An attacker could exploit this vulnerabili...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange, Inc. that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor, which originates from an out-of-bounds read vulnerability in the parsing of JPG files. An attacker could exploit this vulnerabili...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange, Inc. that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor, which originates from an out-of-bounds read vulnerability in the parsing of TIF files. An attacker could exploit this vulnerabili...

The vulnerability of the shift_line() function in the Vim text editor, allowing a hacker to trigger a service failure

The vulnerability of the shiftline function in the Vim text editor is related to the use of extremely large values during row shifting. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2024-31091

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allows Reflected XSS.This issue affects Custom Field Bulk Editor: from n/a through 1.9.1...

CVE-2024-31091 WordPress Custom Field Bulk Editor plugin <= 1.9.1 - Cross Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allows Reflected XSS.This issue affects Custom Field Bulk Editor: from n/a through 1.9.1...

CVE-2024-31091

CVE-2024-31091 is a reflected XSS in the WordPress plugin Custom Field Bulk Editor by SparkWeb Interactive, affecting versions from n/a through 1.9.1. The provided sources do not include a confirmed patch or mitigation details.

PT-2024-23759 · Unknown · Custom Field Bulk Editor

Name of the Vulnerable Software and Affected Versions: Custom Field Bulk Editor versions 1.9.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in the Custom Field Bulk...

WordPress Plugin Custom Field Bulk Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Custom Field Bulk Editor A...

CVE-2024-2794

The Gutenberg Block Editor Toolkit – EditorsKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'editorskit' shortcode in all versions up to, and including, 1.40.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...

CVE-2024-2794

CVE-2024-2794 – The Gutenberg Block Editor Toolkit – EditorsKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s ‘editorskit’ shortcode in all versions up to and including 1.40.4. The Red Hat CVE entry confirms the issue stems from insufficient input sanitization...

WordPress Plugin Gutenberg Block Editor Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2024-30432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider - Slider for your block editor allows Stored XSS.This issue affects B Slider - Slider for your block editor: from n/a through 1.1.12...

CVE-2024-30435 WordPress The Plus Blocks for Block Editor | Gutenberg plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Blocks for Block Editor | Gutenberg allows Reflected XSS.This issue affects The Plus Blocks for Block Editor | Gutenberg: from n/a through 3.2.5...