CVE-2024-51880 WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BeBetter Hotels BeBetter Social Icons allows DOM-Based XSS.This issue affects BeBetter Social Icons: from n/a through 2.7...

CVE-2024-51880 WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sistemasBebetter BeBetter Social Icons bebetter-social-icons allows DOM-Based XSS.This issue affects BeBetter Social Icons: from n/a through = 2.7...

PT-2024-35011 · Unknown · Bebetter Social Icons

Name of the Vulnerable Software and Affected Versions: BeBetter Social Icons versions through 2.7 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to the execution of malicious scripts in the context of...

WordPress plugin BeBetter Social Icons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress BeBetter Social Icons plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin BeBetter Social Icons versions = 2.7...

Malicious code in quill-icons-park (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fd81ef15b75fdcc727a1f8cf17b089f8a90917d26c5db98ea76231da4ffb701 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10569 Malicious code in quill-icons-park (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fd81ef15b75fdcc727a1f8cf17b089f8a90917d26c5db98ea76231da4ffb701 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress BeBetter Social Icons Plugin <= 2.7 is vulnerable to Cross Site Scripting (XSS)

Software BeBetter Social Icons Type Plugin Vulnerable versions = 2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51880 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 646bb344be94 Credits SOPROBRO Required privilege...

CVE-2024-49676

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

CVE-2024-49676 WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

CVE-2024-49676 WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

CVE-2024-49676

CVE-2024-49676 affects the WordPress plugin Custom Icons for Elementor up to version 0.3.3. It is an Unrestricted Upload of File with Dangerous Type vulnerability that allows uploading a Web Shell to the web server. Root cause: insufficient validation for uploaded files in the plugin, enabling ar...

WordPress plugin Custom Icons for Elementor 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons...

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.09 that stems from being affected by an authorization bypass vulnerability that could be exploited by a remote, unprivileged attacker to...

PT-2024-33347 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 2024.03 through 2024.08 Description: The issue is related to an API authorization bypass vulnerability, specifically concerning the support for application files. This could allow a remote unprivileged attacker to...

CVE-2024-49209

CVE-2024-49209 affects Archer Platform 2024.03 through 2024.08. The vulnerability is an API authorization bypass related to supporting application files, allowing a remote unprivileged attacker to elevate privileges and upload additional system icons. Remediation: upgrade to Archer Platform 2024....