494 matches found
CVE-2023-33321 WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure
Missing Authorization vulnerability in Metagauss EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 2.8.6...
CVE-2023-33321 WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure
Missing Authorization vulnerability in Metagauss EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 2.8.6...
CVE-2023-33321: Missing Authorization
Missing Authorization vulnerability in Metagauss EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 2.8.6...
WordPress plugin EventPrime 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-12426 · Metagauss · Metagauss Eventprime
Name of the Vulnerable Software and Affected Versions: Metagauss EventPrime versions n/a through 2.8.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a throu...
EventPrime < 3.3.5 - Unauthenticated Booking Price Manipulation
Description The plugin is vulnerable to booking price manipulations due to insufficient validation and control of booking prices in versions up to, and including, 3.3.4. This makes it possible for unauthenticated attackers to make bookings with lower prices...
WordPress EventPrime plugin <= 3.3.4 - Booking Price Manipulation vulnerability
Booking Price Manipulation vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin EventPrime versions = 3.3.4...
WordPress EventPrime Plugin <= 3.3.4 is vulnerable to Broken Access Control
Software EventPrime Type Plugin Vulnerable versions = 3.3.4 Fixed in 3.3.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31275 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 798327419eed Credits Joshua Chan Required privilege...
EventPrime < 3.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Description The EventPrime plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2024-29776
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-29776
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-29776 WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-29776 WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-29776
Technical details for CVE-2024-29776 (Metagauss EventPrime XSS) are not provided in the supplied documents. No vendor/affected version specifics, root cause, impact, or remediation are disclosed here; monitor official advisories for updates.
CVE-2024-29776: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
PT-2024-23018 · Metagauss · Metagauss Eventprime
Name of the Vulnerable Software and Affected Versions: Metagauss EventPrime versions 3.3.9 and earlier Description: The issue is a Cross Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...
WordPress Plugin EventPrime 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress EventPrime Plugin <= 3.3.9 is vulnerable to Cross Site Scripting (XSS)
Software EventPrime Type Plugin Vulnerable versions = 3.3.9 Fixed in 3.4.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29776 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 775222193de6 Credits Mochamad Sofyan Required privilege...