CVE-2024-24849

CVE-2024-24849 is a CSRF vulnerability in the Quicksand Post Filter jQuery Plugin (versions up to 3.1.1). Connected sources indicate no publicly available patch within the provided docs; PatchStack lists fixed-in as N/A and describes low severity with unlikely exploitation. Monitor for updates an...

WordPress Plugin Quicksand Post Filter jQuery Plugin Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-20616 · Jquery · Quicksand Post Filter Jquery Plugin

Name of the Vulnerable Software and Affected Versions: Quicksand Post Filter jQuery Plugin versions through 3.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing (PUB) jQuery Vulnerability

Summary IBM Engineering Lifecycle Optimization - Publishing jQuery and jQuery.min found vulnerable Vulnerability Details CVEID:CVE-2020-11022 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the jQuery.htmlPrefilter method. A remot...

Quicksand Post Filter jQuery Plugin <= 3.1.1 - Missing Authorization via quicksand_admin_ajax

Description The Quicksand Post Filter jQuery Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'quicksandadminajax' function in versions up to, and including, 3.1.1. This makes it possible for unauthenticated attackers to delete...

Quicksand Post Filter jQuery Plugin <= 3.1.1 - Cross-Site Request Forgery via renderAdmin

Description The Quicksand Post Filter jQuery Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on the 'renderAdmin' function. This makes it possible for unauthenticated attackers to...

WordPress Quicksand Post Filter jQuery Plugin Plugin <= 3.1.1 is vulnerable to Broken Access Control

Software Quicksand Post Filter jQuery Plugin Type Plugin Vulnerable versions = 3.1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-24850 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 1e819776a454 Credits Mika Requir...

WordPress Quicksand Post Filter jQuery Plugin Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Quicksand Post Filter jQuery Plugin Type Plugin Vulnerable versions = 3.1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-24849 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4fb38b54d1c3 Credits...

EulerOS 2.0 SP10 : python-sphinx (EulerOS-SA-2023-2823)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In JQuery version greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

EulerOS 2.0 SP10 : doxygen (EulerOS-SA-2023-2808)

According to the versions of the doxygen packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In JQuery version greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

EulerOS 2.0 SP10 : python-sphinx (EulerOS-SA-2023-2799)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In JQuery version greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

EulerOS 2.0 SP10 : doxygen (EulerOS-SA-2023-2784)

According to the versions of the doxygen packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In JQuery version greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance

Summary Multiple security vulnerabilities related to jQuery, Bootstrap, and other components have been addressed in IBM Security Verify Governance. Vulnerability Details CVEID:CVE-2021-41184 DESCRIPTION: jQuery jQuery-UI is vulnerable to cross-site scripting, caused by improper validation of...

CVE-2020-26629

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server...

CVE-2020-26629

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server...

Unrestricted file upload

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server...

Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager virtual appliance component

Summary Multiple security vulnerabilities related to jQuery and other components have been addressed in IBM Security Verify Governance - Identity Manager virtual appliance component. Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application Server Liberty 23.0.0.9 through...

CVE-2020-26629

CVE-2020-26629 affects Hospital Management System v4.0. Affected component: Hospital Management System (HMS) – file upload functionality allows an unauthenticated attacker to upload arbitrary files to the server, enabling potential code execution or data exposure. The published details indicate a...

CVE-2020-26629

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server...

AZL-45348 CVE-2023-26159 affecting package js-jquery 3.5.0-4

Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse function. When new URL throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect...