Cross site scripting

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-37392 WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...

CVE-2023-37392

CVE-2023-37392 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Dummy Content Generator, affecting versions

CVE-2023-37392 WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...

Wrodpress Plugin wp-dummy-content-generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Wrodpress Plugin...

WordPress plugin Companion Sitemap Generator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-25944 · WordPress · Wp Dummy Content Generator

Name of the Vulnerable Software and Affected Versions: Deepak Anand WP Dummy Content Generator plugin versions prior to 2.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Broken Access Control

Software WP Dummy Content Generator Type Plugin Vulnerable versions = 2.3.0 Fixed in 3.0.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-37394 Patch priority Low CVSS severity Low 5.3 Developer Deepak Anand PSID a2db647ba0de Credits thiennv Required...

TravianZ 安全特征问题漏洞

TravianZ is a free-to-play, in-browser, web-based strategy game from German company Travian. A security vulnerability exists in TravianZ version 8.3.4, 8.3.3, which stems from a cryptographically insecure random number generator used in the password reset function allowing an attacker to guess th...

WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Dummy Content Generator Type Plugin Vulnerable versions = 2.3.0 Fixed in 3.0.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37392 Patch priority Low CVSS severity Low 5.4 Developer Deepak Anand PSID 29759436a0f1 Credits Elliot...

CVE-2023-36993

The CVE concerns TravianZ 8.3.4 and 8.3.3 where the password reset function uses a cryptographically insecure random number generator. This root cause permits an attacker to guess password reset parameters and take over accounts. Public sources in connected documents corroborate the same affected...

CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

WordPress Companion Sitemap Generator – HTML & XML Plugin < 4.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Companion Sitemap Generator – HTML & XML Type Plugin Vulnerable versions 4.5.3 Fixed in 4.5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1780 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2c5448d43a2a...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

CVE-2022-44268-Exploit Expoit for CVE-2022-44268 Arbitrary Fi...

CVE-2023-36463

Meldekarten generator is an open source project to create a program, running locally in the browser without the need for an internet-connection, to create, store and print registration cards for volunteers. All text fields on the webpage are vulnerable to XSS attacks. The user input isn't fully...

Design/Logic Flaw

Meldekarten generator is an open source project to create a program, running locally in the browser without the need for an internet-connection, to create, store and print registration cards for volunteers. All text fields on the webpage are vulnerable to XSS attacks. The user input isn't fully...

CVE-2023-36463

The CVE-2023-36463 impact concerns the Meldekarten generator, a browser-based open source tool for creating volunteer registration cards. The vulnerability is XSS in all text fields due to improper sanitization of user input after submission. Root cause: insufficient input sanitization in the cli...

CVE-2023-36463 Cross site scripting (XSS) in meldekarten generator

Meldekarten generator is an open source project to create a program, running locally in the browser without the need for an internet-connection, to create, store and print registration cards for volunteers. All text fields on the webpage are vulnerable to XSS attacks. The user input isn't fully...

PT-2023-25579 · Unknown · Meldekarten Generator

Name of the Vulnerable Software and Affected Versions: Meldekarten generator versions prior to 1.0.0b1.1.2 Description: The issue concerns the lack of proper sanitization of user input in text fields, making them susceptible to XSS attacks. This has been addressed in a commit, and there are no...

Meldekarten Generator 跨站脚本漏洞

Meldekarten Generator is a project to create a program by the individual developer jucktnich. A cross-site scripting vulnerability exists in Meldekarten generator 1.0.0b1.1.1 and earlier versions, which stems from the vulnerability of all text fields on a web page to an XSS attack, where user inp...