6997 matches found
The vulnerability of the QuMagie multimedia file storage application for QNAP NAS stems from the failure to take measures to neutralize special elements used in the operating system’s command set. This vulnerability allows a perpetrator to execute arbitrary commands.
The vulnerability of the QuMagie multimedia file storage application for QNAP NAS exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Splunk Enterprise platform for operational analysis lies in its lack of measures to neutralize special elements used in the operating system’s command line. This allows attackers to influence the confidentiality and integrity of the protected information.
The vulnerability of the Splunk Enterprise platform for operational analysis stems from the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploitation of this vulnerability can allow a malicious actor to influence the confidentiality and integri...
CVE-2024-31099 WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7...
CVE-2024-31099 WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7...
WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Elements kit Elementor addons versions = 3.0.6...
WordPress Unlimited Elements For Elementor plugin <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Widget Link vulnerability discovered by Webbernaut in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.96...
Unlimited Elements For Elementor < 1.5.97 - Contributor+ Stored XSS
Description The plugin is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget e.g., 'Button Link' due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level acce...
PT-2024-23767
Name of the Vulnerable Software and Affected Versions Shortcodes and extra features for Phlox theme versions 2.15.7 and earlier Description The issue is related to a Missing Authorization vulnerability in the Averta Shortcodes and extra features for Phlox theme. This vulnerability affects the...
CVE-2024-31099: Missing Authorization
Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7...
WordPress Elements kit Elementor addons Plugin <= 3.0.6 is vulnerable to Cross Site Scripting (XSS)
Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.6 Fixed in 3.0.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1238 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID 8734102af007 Credits wesley wcraft Requir...
CVE-2024-30489
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75...
CVE-2024-0367
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget e.g., 'Button Link' in all versions up to, and including, 1.5.96 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2024-0367 Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget e.g., 'Button Link' in all versions up to, and including, 1.5.96 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2024-0367
The CVE affects Unlimited Elements For Elementor (WordPress) up to version 1.5.96, with Stored Cross-Site Scripting via the link field of an installed widget (e.g., Button Link). Root cause: insufficient input sanitization and output escaping on user-supplied attributes. Impact: authenticated use...
PT-2024-15502
Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor plugin for WordPress versions up to, and including, 1.5.96 Description The issue is related to Stored Cross-Site Scripting via the link field of an installed widget, such as 'Button Link', due to insufficient...
CVE-2024-0367: Improper Neutralization of Input During Web Page Generation
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget e.g., 'Button Link' in all versions up to, and including, 1.5.96 due to insufficient input sanitization and output escaping on user supplied attributes...
WordPress Plugin Unlimited Elements For Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2024-30501
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...