CVE-2024-43920 WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.4...

PT-2024-30781 · Jegstudio · Jegstudio Gutenverse

Name of the Vulnerable Software and Affected Versions: Jegstudio Gutenverse versions 1.9.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker can...

CVE-2024-38785

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.2...

CVE-2024-38785 WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.2...

CVE-2024-38785

CVE-2024-38785 refers to a stored XSS vulnerability in the Gutenverse plugin for WordPress (Gutenverse: from n/a through 1.9.2). The issue arises from improper neutralization of input during web page generation, enabling cross-site scripting. Public details list affected versions as Gutenverse

PT-2024-28218 · Jegstudio · Jegstudio Gutenverse

Name of the Vulnerable Software and Affected Versions: Jegstudio Gutenverse versions 1.9.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

Multiple Themes by jegstudio - Multiple Versions - Missing Authorization to Notice Dismissal

Description Multiple theme for WordPress by jegstudio are vulnerable to unauthorized modification of data due to a missing capability check on the noticeclosed function in versions up to, and including, 1.0.3. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2024-33690

Cross-Site Request Forgery CSRF vulnerability in Jegstudio Financio.This issue affects Financio: from n/a through 1.1.3...

CVE-2024-33690 WordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jegstudio Financio.This issue affects Financio: from n/a through 1.1.3...

CVE-2024-33690

Technical details about CVE-2024-33690 (Jegstudio Financio CSRF, affected up to 1.1.3) are not provided in the connected documents. Monitor for official advisories for affected versions, impact, and remediation.

CVE-2024-33690 WordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jegstudio Financio.This issue affects Financio: from n/a through 1.1.3...

PT-2024-25446 · Jegstudio · Jegstudio Financio

Name of the Vulnerable Software and Affected Versions: Jegstudio Financio versions 1.1.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Jegstudio Financio. This issue allows an attacker to perform unintended actions on a user's account. The estimated number of potentiall...