84 matches found
CVE-2017-18591
The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php...
EUVD-2018-17072
Malware in sbrugna...
EUVD-2018-17068
Malware in sbrugna...
EUVD-2018-17066
Malware in sbrugna...
EUVD-2017-9704
Malware in sbrugna...
EUVD-2018-17073
Malware in sbrugna...
EUVD-2024-37560
Malicious code in bioql PyPI...
EUVD-2024-22455
Malicious code in bioql PyPI...
CVE-2024-38709
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6...
CVE-2024-11198
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extraclass’ parameter in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2024-25093
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Milan Petrovic GD Rating System allows Stored XSS.This issue affects GD Rating System: from n/a through 3.5...
CVE-2024-11198
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extraclass’ parameter in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2024-11198
CVE-2024-11198 : GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the extra_class parameter in all versions up to 3.6.1. Exploitation requires authentication at Contributor level or higher and can allow injected scripts to execute when users load affected pag...
CVE-2024-11198 GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extraclass’ parameter in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
WordPress GD Rating System plugin <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via extraclass Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin GD Rating System versions = 3.6.1...
PT-2024-16815 · WordPress · Gd Rating System
Name of the Vulnerable Software and Affected Versions: GD Rating System plugin for WordPress versions up to, and including, 3.6.1 Description: The issue is related to Stored Cross-Site Scripting via the extra class parameter due to insufficient input sanitization and output escaping. This allows...
WordPress GD Rating System Plugin <= 3.6.1 is vulnerable to Cross Site Scripting (XSS)
Software GD Rating System Type Plugin Vulnerable versions = 3.6.1 Fixed in 3.6.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11198 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 65f32a77a93e Credits Peter Thaleikis Requir...
CVE-2024-38709
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6...
CVE-2024-38709 WordPress GD Rating System plugin <= 3.6 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6...
CVE-2024-38709 WordPress GD Rating System plugin <= 3.6 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6...