MAL-2024-8963 Malicious code in common-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 928c83c31f108c60035b2c6c96605de1111ca0ca0faf7fd554e461357801b6cf The OpenSSF Package Analysis project identified 'common-icons' @ 1.0.83 npm as malicious. It is considered malicious because: - The package...

CVE-2024-9024

The Material Design Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mdi-icon shortcode in all versions up to, and including, 0.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-9024 Material Design Icons <= 0.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdi-icon Shortcode

The Material Design Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mdi-icon shortcode in all versions up to, and including, 0.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-9024 Material Design Icons <= 0.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdi-icon Shortcode

The Material Design Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mdi-icon shortcode in all versions up to, and including, 0.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-9024

CVE-2024-9024 concerns the WordPress plugin Material Design Icons (

PT-2024-39369 · WordPress · Material Design Icons

Name of the Vulnerable Software and Affected Versions: Material Design Icons plugin for WordPress versions up to, and including, 0.0.5 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the...

WordPress plugin Material Design Icons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Material Design Icons plugin <= 0.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdi-icon Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via mdi-icon Shortcode vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin Material Design Icons versions = 0.0.5...

WordPress Material Design Icons Plugin <= 0.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Material Design Icons Type Plugin Vulnerable versions = 0.0.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9024 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID df04d692c3af Credits Brian Sans-Souci...

MAL-2024-8731 Malicious code in @ep-mobile/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8898d3fb5c1fead4de584f7a8099d3df0886074a50f328df051524976dda9be2 The OpenSSF Package Analysis project identified '@ep-mobile/icons' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @ep-mobile/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8898d3fb5c1fead4de584f7a8099d3df0886074a50f328df051524976dda9be2 The OpenSSF Package Analysis project identified '@ep-mobile/icons' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

New Phishing Scam Uses Google Drawings and WhatsApp Shortened Links

Cybersecurity researchers have discovered a novel phishing campaign that leverages Google Drawings and shortened links generated via WhatsApp to evade detection and trick users into clicking on bogus links designed to steal sensitive information. "The attackers chose a group of the best-known...

MAL-2024-7921 Malicious code in @wiz-common/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fb5694f92cafa3a8332aab0ed3bc392e2818315ed20a7ee795b1579ad41337d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin Superfly Responsive Menu 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WEM : Application shortcut display blank white icons

On the WEM Agent, custom application shortcut icons uploaded to the WEM Service are displaying as blank white icons...

CVE-2024-37100

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mayur Somani, threeroutes media Elegant Themes Icons allows Stored XSS.This issue affects Elegant Themes Icons: from n/a through 1.3...

CVE-2024-37100

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mayur Somani, threeroutes media Elegant Themes Icons allows Stored XSS.This issue affects Elegant Themes Icons: from n/a through 1.3...

CVE-2024-37100 WordPress Elegant Themes Icons plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mayur Somani, threeroutes media Elegant Themes Icons allows Stored XSS.This issue affects Elegant Themes Icons: from n/a through 1.3...

CVE-2024-37100

CVE-2024-37100 describes a vulnerability in Elegant Themes Icons plugin where Stored XSS can occur due to Improper Neutralization of Input During Web Page Generation. Affected versions are listed as from n/a through 1.3 (no public detail on exact version range beyond that). The root cause is XSS ...

CVE-2024-37100 WordPress Elegant Themes Icons plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mayur Somani, threeroutes media Elegant Themes Icons allows Stored XSS.This issue affects Elegant Themes Icons: from n/a through 1.3...