211 matches found
CVE-2025-22823
CVE-2025-22823 describes a DOM-based Cross-Site Scripting (XSS) in the Genesis Style Shortcodes plugin for WordPress. Affected: Genesis Style Shortcodes
CVE-2025-22823 WordPress Genesis Style Shortcodes Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtwerdy Genesis Style Shortcodes genesis-style-shortcodes allows DOM-Based XSS.This issue affects Genesis Style Shortcodes: from n/a through = 1.0...
PT-2025-4731 · Unknown · Genesis Style Shortcodes
Name of the Vulnerable Software and Affected Versions: Genesis Style Shortcodes versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious...
WordPress plugin Genesis Style Shortcodes 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
WordPress Genesis Style Shortcodes Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Genesis Style Shortcodes versions = 1.0...
Malicious code in bsc-genesis-contract (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...
MAL-2024-11870 Malicious code in bsc-genesis-contract (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...
CVE-2024-51638
Cross-Site Request Forgery CSRF vulnerability in Sanjeev Mohindra Awesome Shortcodes For Genesis awesome-shortcodes-for-genesis allows Stored XSS.This issue affects Awesome Shortcodes For Genesis: from n/a through 1.1.8...
CVE-2024-51638 WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Sanjeev Mohindra Awesome Shortcodes For Genesis awesome-shortcodes-for-genesis allows Stored XSS.This issue affects Awesome Shortcodes For Genesis: from n/a through 1.1.8...
CVE-2024-51638
CVE-2024-51638 is a CSRF-to-Stored XSS vulnerability in the WordPress plugin Awesome Shortcodes For Genesis (versions up to 1.1.8). Exploitation is implied to enable stored XSS via CSRF context; CVSSv3.1 base score 7.1 (high). Public references indicate WordPress plugin 1.1.8 is affected; patch s...
CVE-2024-51638 WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Sanjeev Mohindra Awesome Shortcodes For Genesis awesome-shortcodes-for-genesis allows Stored XSS.This issue affects Awesome Shortcodes For Genesis: from n/a through 1.1.8...
PT-2024-34782 · Unknown · Awesome Shortcodes For Genesis
Name of the Vulnerable Software and Affected Versions: Awesome Shortcodes For Genesis versions 1.1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user into performing unintended actio...
WordPress plugin Awesome Shortcodes For Genesis 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Awesome Shortcodes For Genesis versions 1.1.8...
WordPress Awesome Shortcodes For Genesis Plugin 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF)
Software Awesome Shortcodes For Genesis Type Plugin Vulnerable versions 1.1.8 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51638 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 555acd2f113e Credits SOPROBRO...
The vulnerability of the GraphWorX64 module in the GENESIS64 SCADA system allows a intruder to load arbitrary files or execute arbitrary code.
The vulnerability of the GraphWorX64 module in the GENESIS64 SCADA system is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to download arbitrary files or execute arbitrary code remotely...
The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system allows a intruder to disclose protected information.
The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...
The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system allows a intruder to gain unauthorized access to project files.
The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to project files...
CVE-2024-3563
The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sharing block in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...
CVE-2024-3563
The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sharing block in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...