CVE-2024-8793 Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More <= 2.7.2.1 - Reflected Cross-Site Scripting

The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.2.1. This makes ...

CVE-2024-8793 Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More <= 2.7.2.1 - Reflected Cross-Site Scripting

The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.2.1. This makes ...

CVE-2024-8793

CVE-2024-8793 concerns the Store Exporter for WooCommerce plugin (WordPress) vulnerable to Reflected Cross-Site Scripting via add_query_arg in all versions up to 2.7.2.1. Exploitation requires a user to click a crafted link; unauthenticated attackers can inject scripts on vulnerable pages. Affect...

WordPress Store Exporter for WooCommerce plugin <= 2.7.2.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Store Exporter versions = 2.7.2.1...

WordPress WooCommerce – Store Exporter Plugin <= 2.7.2.1 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce – Store Exporter Type Plugin Vulnerable versions = 2.7.2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8793 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5baa5a642e95 Credits vgo0...

WordPress plugin Store Exporter for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Synology DiskStation Manager Improper Encoding or Escaping of Output (CVE-2018-8920)

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format. This plugin only works with Tenable.ot. Please visit...

RHSA-2022:9058 Red Hat Security Advisory: prometheus-jmx-exporter security update

Bulletin has no description...

RHSA-2022:6820 Red Hat Security Advisory: prometheus-jmx-exporter security update

Bulletin has no description...

RHSA-2020:4807 Red Hat Security Advisory: prometheus-jmx-exporter security update

Bulletin has no description...

Prometheus Exporter Toolkit vulnerable to basic authentication bypass

...

Fedora: Security Advisory (FEDORA-2023-654e0ddfd8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:14218-1 golang-github-lusitaniae-apache_exporter-1.0.8-1.1 on GA media

These are all security issues fixed in the golang-github-lusitaniae-apacheexporter-1.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-46146 affecting package prometheus-process-exporter for versions less than 0.8.2-1

CVE-2022-46146 affecting package prometheus-process-exporter for versions less than 0.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.8.2-1

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.8.2-1. An upgraded version of the package is available that resolves this issue...

Malicious code in exporter-stackdriver (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in github-artifact-exporter-core (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2421 Malicious code in github-artifact-exporter-core (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-14815 · WordPress · The Business Directory Plugin

Name of the Vulnerable Software and Affected Versions: The Business Directory Plugin plugin for WordPress versions up to, and including, 6.4.3 Description: The issue allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by...