CVE-2024-41374

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...

CVE-2024-41374

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...

PT-2024-29383 · Icecoder · Icecoder

Name of the Vulnerable Software and Affected Versions: ICEcoder version 8.1 Description: The issue is related to Cross Site Scripting XSS via the lib/terminal-xhr.php file. This allows for potential malicious script execution. No information is provided about the estimated number of affected...

ICEcoder 安全漏洞

ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which stems from the discovery of a contained path traversal vulnerability via...

ICEcoder 安全漏洞

ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which originated from a discovery via lib/terminal-xhr.php that contained a cross-site scripting...

CVE-2024-41375

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...

CVE-2024-41375

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...

CVE-2024-41373

ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...

CVE-2024-41375

ICEcoder version 8.1 is vulnerable to a Cross-Site Scripting (XSS) flaw located in the lib/terminal-xhr.php file. This vulnerability allows for the potential execution of malicious scripts within the user's browser. While no specific patch version is currently documented, it is recommended to res...

CVE-2024-41374

ICEcoder version 8.1 is vulnerable to a Cross-Site Scripting (XSS) flaw within the lib/settings-screen.php file. This vulnerability allows for the potential injection of malicious scripts into the web page. As a temporary workaround, it is recommended to restrict access to the affected file or av...

ICEcoder 安全漏洞

ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which stems from a discovery via lib/settings-screen.php that contains a cross-site scripting vulnerability...

CVE-2024-41373

ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...

CVE-2024-41375

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...

CVE-2024-41373

ICEcoder version 8.1 is susceptible to a Path Traversal vulnerability within the lib/backup-versions-preview-loader.php file. This flaw allows for improper limitation of a pathname to a restricted directory. As a remediation, it is recommended to restrict access to the affected file until a forma...

WordPress ICEcoder integration Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Software ICEcoder integration Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2358f2d6d388 Credits Rafie Muhammad Patchstack...

GHSA-FVF5-XP83-VRQP ICEcoder vulnerable to Path Traversal

ICEcoder v8.1 allows attackers to execute a directory traversal...

ICEcoder vulnerable to Path Traversal

ICEcoder v8.1 allows attackers to execute a directory traversal...

CVE-2022-34026

ICEcoder v8.1 allows attackers to execute a directory traversal...

Directory traversal

ICEcoder v8.1 allows attackers to execute a directory traversal...

CVE-2022-34026

ICEcoder v8.1 allows attackers to execute a directory traversal...