85 matches found
CVE-2024-37265 WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60...
CVE-2024-37265: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60...
PT-2024-27430 · Ideapush · Ideapush
Name of the Vulnerable Software and Affected Versions: IdeaPush versions n/a through 8.60 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions n/a...
CVE-2024-37461
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...
CVE-2024-37461
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...
CVE-2024-37461 WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...
CVE-2024-37461
CVE-2024-37461 is an unauthenticated Stored XSS in the IdeaPush WordPress plugin (versions up to 8.65) caused by improper input neutralization during web page generation. The vulnerability affects IdeaPush (WordPress plugin) and is listed as patched; remediation is to upgrade to a version with th...
CVE-2024-37461 WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...
CVE-2024-37461: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...
PT-2024-27572 · Ideapush · Ideapush
Name of the Vulnerable Software and Affected Versions: IdeaPush versions through 8.65 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions through...
WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by piro Patchstack Alliance in WordPress Plugin IdeaPush versions = 8.65...
WordPress IdeaPush Plugin <= 8.65 is vulnerable to Cross Site Scripting (XSS)
Software IdeaPush Type Plugin Vulnerable versions = 8.65 Fixed in 8.66 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37461 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7db453746375 Credits piro Required privilege Unauthenticated...
WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by piro Patchstack Alliance in WordPress Plugin IdeaPush versions = 8.60...
WordPress IdeaPush Plugin <= 8.60 is vulnerable to Cross Site Scripting (XSS)
Software IdeaPush Type Plugin Vulnerable versions = 8.60 Fixed in 8.61 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37265 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6d3d6a921f11 Credits piro Required privilege Subscriber...
IdeaPush < 8.58 - Subscriber+ Memory Tab/Routine/Taxonomy Creation
Description The plugin does not have authorisation in various AJAX calls, allowing any authenticated users, such as subscriber to create memory tabs, routines and taxonomies...
WordPress IdeaPush Plugin < 8.58 is vulnerable to Broken Access Control
Software IdeaPush Type Plugin Vulnerable versions 8.58 Fixed in 8.58 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-48774 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1d6d440b6d76 Credits Abdi Pranata Required privilege Subscrib...
CVE-2023-47181
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson IdeaPush plugin = 8.52 versions...
CVE-2023-47181
A vulnerability in Northern Beaches Websites IdeaPush ideapush.This issue affects IdeaPush: from n/a through = 8.52...
