1225 matches found
PT-2024-27299 · Elegant Themes · Elegant Themes Icons
Name of the Vulnerable Software and Affected Versions: Elegant Themes Icons versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...
CVE-2024-37552
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Inisev Social Media & Share Icons allows Stored XSS.This issue affects Social Media & Share Icons: from n/a through 2.9.1...
CVE-2024-37552
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Inisev Social Media & Share Icons allows Stored XSS.This issue affects Social Media & Share Icons: from n/a through 2.9.1...
CVE-2024-6309
The Attachment File Icons AF Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.3. This is due to missing nonce validation in the 'afioverview' function and missing file type validation in the 'uploadicons' function...
CVE-2024-6309 Attachment File Icons (AF Icons) <= 1.3 - Cross-Site Request Forgery to Arbitrary File Upload
The Attachment File Icons AF Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.3. This is due to missing nonce validation in the 'afioverview' function and missing file type validation in the 'uploadicons' function...
CVE-2024-6309
CVE-2024-6309 — WordPress plugin Attachment File Icons (AF Icons)
WordPress Attachment File Icons (AF Icons) plugin <= 1.3 - Cross-Site Request Forgery to Arbitrary File Upload vulnerability
Cross-Site Request Forgery to Arbitrary File Upload vulnerability discovered by István Márton in WordPress Plugin Attachment File Icons versions = 1.3...
WordPress plugin Attachment File Icons security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Attachment File Icons Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software Attachment File Icons Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-6309 Patch priority Low CVSS severity Low 9.6 Developer Claim ownership PSID c3b98b264536 Credits István Márton...
WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Social Media & Share Icons versions = 2.9.1...
WordPress Social Media & Share Icons Plugin <= 2.9.1 is vulnerable to Cross Site Scripting (XSS)
Software Social Media & Share Icons Type Plugin Vulnerable versions = 2.9.1 Fixed in 2.9.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37552 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1877f7fbd21d Credits Joshua Chan Required...
Icons may intermittently disappear in CWA for Mac after upgrading to version 2405
Icons may intermittently disappear in Citrix Workspace for Mac after upgrading from version 2402 or 2402.10 to version 2405...
Malicious code in sq-icons (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2383 Malicious code in fluent-system-icons (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent-system-icons (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent-icons-library (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2382 Malicious code in fluent-icons-library (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in alloy-icons (npm)
--- -= Per source details. Do not edit below this line.=-...