WordPress Ultra Addons for Contact Form 7: Cross-site Scripting Vulnerabilities

WordPress Ultra Addons for Contact Form 7 3.5.54 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping. Unauthenticated attackers can bypass the extension name blacklist by uploading text files with HTML...

WordPress WPConsent Cross-Site Script Vulnerability

WordPress WPConsent versions 1.1.9 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for comment content. It involves a noise key mechanism in the Simple HTML DOM parser, allowing for stored cross-site scripting...

WordPress GeoDirectory cross-site scripting vulnerability

WordPress GeoDirectory 2.8.192 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of the twitterusername parameter input and insufficient output escaping. Additionally, the client-side HTML pattern attribute restrictions are not validat...

Astra Linux – vulnerability in Chromium

After using “free” in the storage foundation within Google Chrome prior to version 96.0.4664.45, a remote attacker could potentially exploit heap corruption by sending a specially crafted HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in tab groups in Google Chrome prior to version 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

An improper implementation in Google Lens within Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions by using a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

A heap buffer overflow in V8 within Google Chrome prior to version 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a specially crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.212, using “after free” in notifications in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

A heap buffer overflow in the Codecs component in Google Chrome on Linux and ChromeOS prior to version 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

A heap buffer overflow in Dawn in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.72, using free after in WebMIDI in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in golang-1.23

If a trusted template author wrote a tag containing an empty ‘type’ attribute or a ‘type’ attribute with ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block...

Astra Linux – Vulnerability in JQuery

In jQuery, starting from version 1.12.0 and before 3.5.0, passing HTML from untrusted sources—even after sanitizing it—to one of jQuery’s DOM manipulation methods e.g., .html, .append, etc. may execute untrusted code. This issue has been fixed in jQuery 3.5.0...

Astra Linux – vulnerability in Chromium

After using “free” in the Sign-In feature of Google Chrome prior to version 95.0.4638.69, a remote attacker could have exploited heap corruption by sending a specially crafted HTML page to convince a user to log into Chrome...

Astra Linux – vulnerability in Chromium

The improper implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Improper implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

A heap buffer overflow in Sync in Google Chrome prior to version 141.0.7390.65 allowed a remote attacker to perform an out-of-bounds memory read via a specially crafted HTML page. Chromium security severity: High...