CVE-2022-2763

The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2763

The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2763

Summary: CVE-2022-2763 affects the WP Socializer WordPress plugin prior to 7.3. The issue arises from insufficient sanitisation/escaping of some Icons settings, enabling a highly privileged user (e.g., admin) to perform a Stored Cross-Site Scripting (XSS) attack even when unfiltered_html is disal...

CVE-2022-2763 WP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting

The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Malicious Package

Overview @cloud-panel/icons is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

WP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC Activate the Share Icons feature of the...

WP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup Activate the Share Icons feature of the...

Malicious code in social-media-icons-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca362d17a667da1d094b044be149065c8d362cc8ae8e0dbd43bfdb0e9c537df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6198 Malicious code in social-media-icons-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca362d17a667da1d094b044be149065c8d362cc8ae8e0dbd43bfdb0e9c537df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross-site Scripting (XSS)

jenkins is vulnerable to cross-site scriptingXSS attacks. The HTML output generated for new symbol-based SVG icons includes the title attribute of l:ionicon and alt attribute of l:icon without further escaping, resulting in a cross-site scripting XSS vulnerability...

CVE-2022-34172

In Jenkins 2.340 through 2.355 both inclusive symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting XSS vulnerability...

MAL-2022-5655 Malicious code in react-nati0e-vecor-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e0e350c78d225cd75ed5e2ca0291e0d192e6892797c1a7a61c762bfcb2fe39e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-nati0e-vecor-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e0e350c78d225cd75ed5e2ca0291e0d192e6892797c1a7a61c762bfcb2fe39e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deere-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4872d39ec3fd4c04d5d042ba001480f7e3d8cc24fe7f7e8b5951300aa6ddfd3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview deere-ui-icons is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious code in waffles-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1844bfb21f9898d69137bb315c2e9bfb2b07a27b55a5c8962b152f8df216f980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7030 Malicious code in waffles-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1844bfb21f9898d69137bb315c2e9bfb2b07a27b55a5c8962b152f8df216f980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca53637ebcf9b69a19876fca2cec6a417f55c18845d4019edd17d8e3ab2e29b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pack-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be9ec3c538d6a4cbaf75081c6996c9c6bdae7ff861aae544eec2b9fd02162de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icons-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ba92fd048a472e3cb8fd55e322eed6b9fbe9f052cf6750b9c24a34e67c85da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...