CVE-2023-50874

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1...

CVE-2023-50874

CVE-2023-50874 is a Stored XSS in WordPress Infinite Scroll – Ajax Load More. The vulnerability stems from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected plugin/version range: from n/a through 6.1.0.1. The entry is marked as patched; re...

CVE-2023-50874: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1...

WordPress Plugin WordPress Infinite Scroll Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-34033

Cross-Site Request Forgery CSRF vulnerability in Malinky Ajax Pagination and Infinite Scroll plugin = 2.0.1 versions...

CVE-2023-34033

Cross-Site Request Forgery CSRF vulnerability in Malinky Ajax Pagination and Infinite Scroll plugin = 2.0.1 versions...

CVE-2023-34033

A vulnerability in craigramsay Ajax Pagination and Infinite Scroll malinky-ajax-pagination.This issue affects Ajax Pagination and Infinite Scroll: from n/a through = 2.0.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Malinky Ajax Pagination and Infinite Scroll plugin = 2.0.1 versions...

CVE-2023-34033

CVE-2023-34033 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Malinky Ajax Pagination and Infinite Scroll , affecting versions ≤ 2.0.1. Public sources confirm the issue as CSRF with no patch available, and recommend upgrading to a version newer than 2.0.1 as the reme...

CVE-2023-34033 WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Malinky Ajax Pagination and Infinite Scroll plugin = 2.0.1 versions...

CVE-2023-34033: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Malinky Ajax Pagination and Infinite Scroll plugin = 2.0.1 versions...

WordPress Ultimate Infinite Scroll Plugin Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Infinite Scroll Plugin Type Plugin Vulnerable versions = 1.0.3 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e939817d24d9 Credits Rafie Muhammad...

WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ajax Pagination and Infinite Scroll Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A2: Broken Authentication Classification Cross Site Request Forgery CSRF CVE CVE-2023-34033 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 411a2149f500 Credits...

Malicious code in ngx-infinite-scroll-fixed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc6e4f4f6c9bb18d908e27efa5494ad7f70f25140841c4ac2dc596288dcc560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-623 Malicious code in ngx-infinite-scroll-fixed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc6e4f4f6c9bb18d908e27efa5494ad7f70f25140841c4ac2dc596288dcc560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-4466

The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

CVE-2022-4466

The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

Cross site scripting

The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

CVE-2022-4466 WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS

The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...