CVE-2024-41374

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...

CVE-2024-41374

ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php. The public docs describe a XSS flaw in that file, but do not provide exploited details. Root cause indicated is improper handling/sanitization in lib/settings-screen.php; CVSS indicates NETWORK vector with user ...

CVE-2024-41375

CVE-2024-41375 affects ICEcoder 8.1, with a Cross Site Scripting (XSS) vulnerability via lib/terminal-xhr.php. Affected component: lib/terminal-xhr.php in ICEcoder 8.1. Documented impact: XSS; no exploit specifics or fixed version are provided in the supplied sources. Remediation status not state...

ICEcoder 安全漏洞

ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which originated from a discovery via lib/terminal-xhr.php that contained a cross-site scripting...

CVE-2024-41375

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...

CVE-2024-41373

ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...

CVE-2024-41373

ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...

CVE-2024-41375

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...

PT-2024-29383 · Icecoder · Icecoder

Name of the Vulnerable Software and Affected Versions: ICEcoder version 8.1 Description: The issue is related to Cross Site Scripting XSS via the lib/terminal-xhr.php file. This allows for potential malicious script execution. No information is provided about the estimated number of affected...

CVE-2024-41373

ICEcoder 8.1 is affected by a Path Traversal vulnerability via lib/backup-versions-preview-loader.php (CVE-2024-41373). All connected sources consistently identify the issue as a path traversal in that file. The documentation does not explicitly detail impact vectors, affected configurations, or ...

CVE-2024-41374

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...

ICEcoder 安全漏洞

ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which stems from a discovery via lib/settings-screen.php that contains a cross-site scripting vulnerability...

ICEcoder 安全漏洞

ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which stems from the discovery of a contained path traversal vulnerability via...

PT-2024-29381 · Icecoder · Icecoder

Name of the Vulnerable Software and Affected Versions: ICEcoder version 8.1 Description: The issue is related to a Path Traversal vulnerability. It affects the lib/backup-versions-preview-loader.php file. Recommendations: For ICEcoder version 8.1, consider restricting access to the...

CVE-2024-41374

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...

PT-2024-29382 · Icecoder · Icecoder

Name of the Vulnerable Software and Affected Versions: ICEcoder version 8.1 Description: The issue is related to Cross Site Scripting XSS via the lib/settings-screen.php file. This allows for potential malicious script injection. Recommendations: For ICEcoder version 8.1, consider restricting...

WordPress ICEcoder integration Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Software ICEcoder integration Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2358f2d6d388 Credits Rafie Muhammad Patchstack...

GHSA-FVF5-XP83-VRQP ICEcoder vulnerable to Path Traversal

ICEcoder v8.1 allows attackers to execute a directory traversal...

ICEcoder vulnerable to Path Traversal

ICEcoder v8.1 allows attackers to execute a directory traversal...

CVE-2022-34026

ICEcoder v8.1 allows attackers to execute a directory traversal...