libertygoldmaryland.com Improper Access Control vulnerability OBB-3803740

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

perla-gold-perla-luxury.hotelprimorsko.net Cross Site Scripting vulnerability OBB-3780480

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-47662

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in GoldBroker.Com Live Gold Price & Silver Price Charts Widgets plugin = 2.4 versions...

WordPress Plugin Live Gold Price & Silver Price Charts Widgets Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Live Gold Price & Silver Price Charts Widgets Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)

Software Live Gold Price & Silver Price Charts Widgets Type Plugin Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47662 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 58de0e2ba596 Credi...

CVE-2023-41797

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...

CVE-2023-41797

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...

CVE-2023-41797

CVE-2023-41797 : The WordPress plugin Locations (Gold Plugins Locations) , affected in versions &lt;= 4.0, contains a Stored Cross-Site Scripting (XSS) vulnerability. Connected sources confirm the issue affects the Locations plugin with contributor+ (and higher) roles storing scripts that can be ...

CVE-2023-41797 WordPress Locations Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...

PT-2023-28097 · Gold Plugins · Gold Plugins Locations

Name of the Vulnerable Software and Affected Versions: Gold Plugins Locations plugin versions prior to 4.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be stored...

Cyber Group 'Gold Melody' Selling Compromised Access to Ransomware Attackers

A financially motivated threat actor has been outed as an initial access broker IAB that sells access to compromised organizations for other adversaries to conduct follow-on attacks such as ransomware. SecureWorks Counter Threat Unit CTU has dubbed the e-crime group Gold Melody, which is also kno...

Progress WhatsUp Gold < 23.0.0 XSS

According to its self-reported version number, the Progress WhatsUp Gold application installed on the remote host is prior to 23.0.0. It is, therefore, affected by a cross-site scripting vulnerability due to an SNMP-related application endpoint failing to adequately sanitize malicious input. This...

CVE-2023-35759

In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS...

Cross site scripting

In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS...

CVE-2023-35759

In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS...

Progress Software WhatsUp Gold 跨站脚本漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold prior to version 23.0...

PT-2023-25295 · Ipswitch · Whatsup Gold

Name of the Vulnerable Software and Affected Versions: In Progress WhatsUp Gold versions prior to 23.0.0 Description: The issue is related to an SNMP-related application endpoint that failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary...

CVE-2023-35759

WhatsUp Gold before 23.0.0 contains a cross-site scripting (XSS) vulnerability in a SNMP-related application endpoint that fails to sanitize input, allowing an unauthenticated attacker to execute arbitrary code in a victim’s browser. The issue is reported as stored XSS in the sysName SNMP paramet...

WordPress Soundcloud Is Gold Plugin <= 2.5.1 is vulnerable to Broken Access Control

Software Soundcloud Is Gold Type Plugin Vulnerable versions = 2.5.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32586 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cf1dacc0daae Credits István Márton Required...