CVE-2024-47621 WordPress Zotpress plugin <= 7.3.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Katie Zotpress zotpress allows Stored XSS.This issue affects Zotpress: from n/a through = 7.3.10...

CVE-2024-47621

CVE-2024-47621 affects the WordPress Zotpress plugin up to version 7.3.10 and is a Stored XSS caused by improper input neutralization during web page generation. The vulnerability affects Zotpress versions

WordPress Zotpress Plugin <= 7.3.9 is vulnerable to Cross Site Scripting (XSS)

Software Zotpress Type Plugin Vulnerable versions = 7.3.9 Fixed in 7.3.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34569 Patch priority Low CVSS severity Low 6.5 Developer Katie Seaborn PSID 7fcedeab8bd4 Credits LVT-tholv2k Required privilege Contributor...

CVE-2024-30488 WordPress Zotpress plugin <= 7.3.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Katie Zotpress zotpress.This issue affects Zotpress: from n/a through = 7.3.7...

CVE-2024-30488 WordPress Zotpress plugin <= 7.3.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Katie Zotpress zotpress.This issue affects Zotpress: from n/a through = 7.3.7...

CVE-2024-30488

CVE-2024-30488 is tied to the Zotpress WordPress plugin (Zotpress, affected: n/a through 7.3.7) and is characterized as an SQL Injection. The linked Red Hat/WordFence entries confirm the issue exists as an authenticated (Contributor+) SQL injection against Zotpress and note a patched status, indi...

CVE-2023-46313

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Katie Seaborn Zotpress plugin = 7.3.4 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Katie Seaborn Zotpress plugin = 7.3.4 versions...

CVE-2023-46313

CVE-2023-46313 describes an unauthenticated, reflected XSS in the WordPress Zotpress plugin prior to version 7.3.4. Multiple sources confirm the affected component and the root cause is insufficient sanitization/escaping of output parameters, enabling an attacker to inject scripts via crafted inp...

CVE-2023-46313 WordPress Zotpress Plugin <= 7.3.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Katie Seaborn Zotpress plugin = 7.3.4 versions...

WordPress Zotpress Plugin <= 7.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Zotpress Type Plugin Vulnerable versions = 7.3.4 Fixed in 7.3.5 OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Scripting XSS CVE CVE-2023-46313 Patch priority High CVSS severity High 7.1 Developer Katie Seaborn PSID 59509807c75c Credits SeungYongLee Required privile...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Katie Seaborn Zotpress plugin = 7.3.3 versions...

CVE-2023-32961

CVE-2023-32961 affects the WordPress Zotpress plugin by Katie Seaborn, specifically vulnerable in versions ≤ 7.3.3. The connected exploit details indicate an unauthenticated, reflected Cross‑Site Scripting (XSS) weakness in Zotpress, traced to the get_request_token path in zotpress/lib/admin/admi...

CVE-2023-32961 WordPress Zotpress Plugin <= 7.3.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Katie Seaborn Zotpress plugin = 7.3.3 versions...

PT-2023-24102 · WordPress · Katie Seaborn Zotpress

Name of the Vulnerable Software and Affected Versions: Katie Seaborn Zotpress plugin versions = 7.3.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devices worldwide o...

WordPress Plugin Katie Seaborn Zotpress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin... A cross-site scripting...

WordPress Zotpress Plugin <= 7.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Zotpress Type Plugin Vulnerable versions = 7.3.3 Fixed in 7.3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32961 Patch priority Medium CVSS severity Medium 7.1 Developer Katie Seaborn PSID 1e1dc3c4b47a Credits LOURCODE Required privileg...