CVE-2023-45650

Cross-Site Request Forgery CSRF vulnerability in Fla-shop.Com HTML5 Maps plugin = 1.7.1.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Fla-shop.Com HTML5 Maps plugin = 1.7.1.4 versions...

CVE-2023-45650 WordPress HTML5 Maps Plugin <= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Fla-shop.Com HTML5 Maps plugin = 1.7.1.4 versions...

CVE-2023-45650

CVE-2023-45650: Cross-Site Request Forgery in HTML5 Maps plugin for Fla-shop.Com, affected versions

PT-2023-29626 · Unknown · Fla-Shop.Com Html5 Maps

Name of the Vulnerable Software and Affected Versions: Fla-shop.Com HTML5 Maps plugin versions = 1.7.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

WordPress Plugin HTML5 Maps Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress HTML5 Maps Plugin <= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software HTML5 Maps Type Plugin Vulnerable versions = 1.7.1.4 Fixed in 1.7.1.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45650 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 414faf6d1725 Credits Mika Required...

Limo Booking Software v1.0 - CORS Vulnerability

Title: Limo Booking Software v1.0 - CORS Author: nu11secur1ty Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/limo-booking-software/sectionDemo Reference: https://portswigger.net/web-security/cors Description: The application implements an HTML5 cross-origin resource...

Limo Booking Software v1.0 - CORS

Title: Limo Booking Software v1.0 - CORS Author: nu11secur1ty Date: 09/08/2023 Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/limo-booking-software/sectionDemo Reference: https://portswigger.net/web-security/cors Description: The application implements an HTML5...

html5-picture (>=0.0.4-alpha <=0.2.0), image-decompose (>=0.1.0 <=0.4.1) +1 more potentially affected by CVE-2023-4863 +1 more via webp (=0.1.3)

webp CARGO version =0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on webp and may be impacted: - html5-picture =0.0.4-alpha, =0.1.0, =0.4.1 - towebp =0.1.0 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:GHSA-J7HP-H8JX-5PPR...

HTML5 external users are not able to launch applications via Netscaler Gateway, Workspace works.

Users connecting externally are not able to launch connections with the Light HTML5 browser access but are able to launch with the Workspace App. Error displayed: "Citrix Workspace app cannot connect to the server. Please check your network connection or contact your help desk for assistance."...

Citrix PDF Printer does not open full screen with Edge as default PDF viewer

When users are using the HTML5 client and Citrix PDF Printer while using Edge as the default PDF viewer the print job is shown but there is a scroll bar on the right. If the user changes to Adobe as the default PDF viewer the print job displays correctly...

How to disable Receiver for HTML5 in Cloud?

How to disable Receiver for HTML5 in Cloud?...

WordPress Quick Audio Player – Best HTML5 Audio Player Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Quick Audio Player – Best HTML5 Audio Player Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1caa9fec69d5 Credits Rafie...

Windows on-screen keyboard shows up in a Windows VDA session through iOS/HTML5 Citrix Workspace App

Using Citrix Workspace app for HTML5, or Citrix Workspace app for iOS, on an iPad, to launch a virtual Windows desktop, tap the screen to start inputting/editing in the session, the Windows VDA side on-screen keyboard may show up, instead of the iOS native touch keyboard...

How to set taskbar as auto-hide for all users in HTML5 Workspace App

HTML5 Workspace App taskbar configuration...

html5.litten.com Cross Site Scripting vulnerability OBB-3307575

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

html5-editor.net Cross Site Scripting vulnerability OBB-3306163

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

craftercms 4.x.x - cross-origin resource sharing Vulnerability

Exploit Title: craftercms 4.x.x - CORS Author: nu11secur1ty Vendor: https://docs.craftercms.org/en/4.0/index.html Software: https://github.com/craftercms/craftercms/tags = 4.x.x Reference: https://portswigger.net/web-security/cors Description: The application implements an HTML5 cross-origin...

CWA HTML5 shows incorrect version

After upgrading CWA HTML5 from v2101 to any later versionsE.g. v2309 in the storefront server, the About dialog still shows the old version. The Storefront Console however still shows the correct version...