9 matches found
EUVD-2023-32330
Malicious code in bioql PyPI...
CVE-2023-28687
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
CVE-2023-28687
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
CVE-2023-28687
CVE-2023-28687 is a Reflected XSS vulnerability affecting multiple WordPress themes: Glaze Blog Lite (<= 1.1.4), Fascinate (<= 1.0.8), Cream Blog (<= 2.1.3), and Cream Magazine (= 1.1.5, Fascinate >= 1.0.9, Cream Blog >= 2.1.4, and Cream Magazine >= 2.1.5. Patch priority ranges ...
CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
PT-2024-12173
Name of the Vulnerable Software and Affected Versions Glaze Blog Lite versions 1.1.4 and earlier Fascinate version 1.0.8 Cream Blog version 2.1.3 Cream Magazine version 2.1.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site...
CVE-2023-28687: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
WordPress Glaze Blog Lite Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
Software Glaze Blog Lite Type Theme Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28687 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 0a07af531c50 Credits László Radnai Required...