21 matches found
EUVD-2017-7980
Malware in sbrugna...
EUVD-2024-53089
Malicious code in bioql PyPI...
EUVD-2024-34231
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2017-16804
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote...
CVE-2024-11945
The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...
CVE-2024-56292
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Email Reminders email-reminders allows Stored XSS.This issue affects Email Reminders: from n/a through = 2.0.5...
WordPress plugin Email Reminders cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Email Reminders version 2.0.5 and previous versions of cross-site scripting vulnerabili...
CVE-2024-56292
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Email Reminders email-reminders allows Stored XSS.This issue affects Email Reminders: from n/a through = 2.0.5...
CVE-2024-56292 WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Email Reminders email-reminders allows Stored XSS.This issue affects Email Reminders: from n/a through = 2.0.5...
CVE-2024-56292 WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop, oplugins Email Reminders allows Stored XSS.This issue affects Email Reminders: from n/a through 2.0.5...
CVE-2024-56292
CVE-2024-56292 : WordPress Email Reminders plugin ≤ 2.0.5 has a Stored XSS via improper neutralization of input during web page generation. The issue affects Email Reminders versions from n/a through 2.0.5; root cause is inadequate escaping of user-supplied data in page output, enabling arbitrary...
WordPress plugin Email Reminders 跨站脚本漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Email Reminders version 2.0.5 and previous versions of cross-site scripting vulnerabili...
PT-2025-3255 · WordPress · Wpdevelop Oplugins Email Reminders
Name of the Vulnerable Software and Affected Versions: wpdevelop oplugins Email Reminders versions n/a through 2.0.5 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS in wpdevelop...
WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Khang Duong Patchstack Alliance in WordPress Plugin Email Reminders versions = 2.0.5...
CVE-2024-11945
The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...
CVE-2024-11945
CVE-2024-11945 is a Stored Cross-Site Scripting flaw in the Email Reminders plugin for WordPress. The issue arises from insufficient input sanitization and output escaping in the id parameter, affecting all versions up to and including 2.0.4. Exploitation requires authenticated access (Contributo...
CVE-2024-11945 Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...
WordPress plugin Email Reminders 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
PT-2024-17357 · WordPress · Email Reminders Plugin For Wordpress
Name of the Vulnerable Software and Affected Versions: Email Reminders plugin for WordPress versions up to, and including, 2.0.4 Description: The issue is related to Stored Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. This allows...
WordPress Email Reminders plugin <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via id Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Email Reminders versions = 2.0.4...