7050 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...
CVE-2023-49155
CVE-2023-49155 is a CSRF vulnerability in the WordPress plugin Button Generator – easily Button Builder. Affected versions are
CVE-2023-49155 WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...
CVE-2023-49155 WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...
PT-2023-31074 · Unknown · Button Generator
Name of the Vulnerable Software and Affected Versions: Button Generator – easily Button Builder versions n/a through 2.3.8 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...
WordPress Plugin Button Generator Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2023-29314 · Silicon · Z/Ip Gateway
Name of the Vulnerable Software and Affected Versions: Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK versions prior to 7.18.3 Description: The first S0 encryption key is generated with an uninitialized PRNG, making the first S0 key generated at startup predictable. This potentially...
Backup Migration < 1.3.8 - Unauthenticated RCE
Description The plugin is vulnerable to Remote Code Execution via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote code execution. This makes it possible for unauthenticated...
CVE-2023-6650
A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated remotely. The exploi...
CVE-2023-6650
A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated remotely. The exploi...
Cross site scripting
A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated remotely. The exploi...
CVE-2023-6650
CVE-2023-6650 affects SourceCodester Simple Invoice Generator System 1.0. The vulnerability is a cross-site scripting flaw in the login.php handling of the cashier parameter. The issue allows an attacker to inject scripts that may be executed in the context of the victim’s browser. Remote initiat...
CVE-2023-6650 SourceCodester Simple Invoice Generator System login.php cross site scripting
A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated remotely. The exploi...
CVE-2023-6650 SourceCodester Simple Invoice Generator System login.php cross site scripting
A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated remotely. The exploi...
SourceCodester Simple Invoice Generator System Cross-Site Scripting Vulnerability
Simple Invoice Generator System is a simple invoice generator system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in SourceCodester Simple Invoice Generator System version 1.0, which stems from a cross-site scripting XSS vulnerability in the file login.php...
Button Generator – easily Button Builder < 2.3.9 - Cross-Site Request Forgery
Description The Button Generator – easily Button Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.8. This is due to missing nonce validation on the btgcount function. This makes it possible for unauthenticated attackers to reset the...
Button Generator – easily Button Builder < 2.3.9 - Missing Authorization
Description The Button Generator – easily Button Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function btgcount function in versions up to, and including, 2.3.8. This makes it possible for unauthenticated attackers to res...
WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Broken Access Control
Software Button Generator – easily Button Builder Type Plugin Vulnerable versions = 2.3.8 Fixed in 2.3.9 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49154 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0051a12ba9e7 Credits Elli...
WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Software Button Generator – easily Button Builder Type Plugin Vulnerable versions = 2.3.8 Fixed in 2.3.9 OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2023-49155 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f69c6cdb268...