GHSA-M9GV-6P22-QGMJ ai-controller-frontend payment status in basket isn't reset

Impact Payment status in basket isn't reset...

ai-controller-frontend payment status in basket isn't reset

Impact Payment status in basket isn't reset...

ai-controller-frontend payment status in basket isn't reset

Payment status in basket isn't reset...

Improper Access Control

aimeos/ai-admin-graphql is vulnerable to Improper Access Control. The vulnerability is due to inadequate enforcement of access control policies within aimeos/ai-admin-graphql, allowing editors are able to manage their own services via the GraphQL API, bypassing the intended restrictions designed...

WordPress WP User Frontend plugin <= 4.0.7 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin WP User Frontend versions = 4.0.7...

WordPress WP User Frontend Plugin <= 4.0.7 is vulnerable to Backdoor

Software WP User Frontend Type Plugin Vulnerable versions = 4.0.7 Fixed in 4.0.8 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b7d6d9c8134f Credits Sansec.io Required privilege Unauthenticated Published 3 July,...

CVE-2024-39325

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39325 aimeos/ai-controller-frontend doesn't reset payment status in basket

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39325 aimeos/ai-controller-frontend doesn't reset payment status in basket

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39325 aimeos/ai-controller-frontend doesn't reset payment status in basket

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39325

Affected software: aimeos/ai-controller-frontend (Aimeos frontend controller). Root cause (as described): does not reset the payment status of a user’s basket after the user completes a purchase. Impact (as stated): payment status may remain abnormal in the user’s basket after checkout; exact exp...

PT-2024-28450 · Aimeos · Ai-Controller-Frontend

Name of the Vulnerable Software and Affected Versions: aimeos/ai-controller-frontend versions prior to 2024.04.2 aimeos/ai-controller-frontend versions prior to 2023.10.9 aimeos/ai-controller-frontend versions prior to 2022.10.8 aimeos/ai-controller-frontend versions prior to 2021.10.8...

@cdmx/wappler_ag_grid (>=1.2.5, <=1.7.8), @cosmotech/ui (>=8.0.0, <=9.0.0) +20 more potentially affected by CVE-2024-39001 via ag-grid-community (>=31.0.0, <=31.3.2)

ag-grid-community NPM version =31.0.0, =1.2.5, =8.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =2.7.9, =31.0.0, =31.1.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =0.1.65, =0.1.72 and more Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

Cross-site Scripting (XSS)

TYPO3 is vulnerable to Cross-site Scripting XSS. The vulnerability is due to failing to properly encode user input in the login status display in the website frontend, requiring a valid user account either backend or frontend to exploit...

WordPress Frontend Checklist plugin <= 2.3.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Felipe Caon in WordPress Plugin Frontend Checklist versions = 2.3.2...

CVE-2024-4957

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-4959

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-4957

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-4959

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-4959

CVE-2024-4959 affects the WordPress plugin “Frontend Checklist” (versions up to 2.3.2). The vulnerability enables Stored XSS via certain settings, exploitable by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (e.g., multisite). Connected sources corroborate the admin+...