145 matches found
CVE-2023-0167 GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS
The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0167 GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS
The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0167
CVE-2023-0167 affects GetResponse for WordPress plugin up to version 5.5.31. The root cause is failure to validate and escape certain shortcode attributes before output in rendered pages, enabling Stored XSS for users with the contributor role and above. Public data in connected sources confirms ...
WordPress plugin GetResponse 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-0167: Undefined Security Weakness
The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. grwebform center='on'...
GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. PoC grwebform center='on'...
SUSE CVE-2015-0828
Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted JavaScript code that makes an...
WordPress GetResponse for WordPress Plugin <= 5.5.31 is vulnerable to Cross Site Scripting (XSS)
Software GetResponse for WordPress Type Plugin Vulnerable versions = 5.5.31 Fixed in 5.5.32 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6a0becd92da1 Credits Unknown Required...
CVE-2022-35277
Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...
CVE-2022-35277
Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...
CVE-2022-35277 WordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...
CVE-2022-35277
CVE-2022-35277 affects the WordPress GetResponse plugin, version
PT-2022-22679 · WordPress · Getresponse
Name of the Vulnerable Software and Affected Versions: GetResponse plugin versions = 5.5.20 at WordPress. Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
WordPress plugin GetResponse 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2022-35277: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...
GetResponse < 5.5.21 - API Key Update via CSRF
The plugin does not have CSRF check when updating the API key, which could allow attackers to make logged admins update it via a CSRF attack...
WordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerability leading to API Key Update
Cross-Site Request Forgery CSRF vulnerability leading to API Key Update discovered by Rasi Afeef Patchstack Alliance in WordPress GetResponse plugin versions = 5.5.20. Solution Update the WordPress GetResponse for WordPress plugin to the latest available version at least 5.5.21...
