WordPress Logo Slider Plugin < 4.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Logo Slider Type Plugin Vulnerable versions 4.1.0 Fixed in 4.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5429 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5ceef8963242 Credits Dmitrii Ignatyev Required...

WordPress plugin Logo Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-36171 · WordPress · Logo Slider

Name of the Vulnerable Software and Affected Versions: The Logo Slider WordPress plugin versions prior to 4.1.0 Description: The issue concerns the Logo Slider WordPress plugin, which does not validate and escape some of its Slider Settings before outputting them back in attributes. This could...

kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

Google Search user interface: A/B testing shows security concerns remain

For the past few days, Google has been A/B testing some subtle visual changes to its user interface for the search results page. You may only get the new UI for certain types of searches or based on your current geolocation. This test is not to be confused with but could part of a previously...

The vulnerability of microprogrammed software in Siemens LOGO!8 BM and SIPLUS LOGO! controllers, related to insufficient validation of input data, allows attackers to trigger malfunctions during maintenance operations.

The vulnerability of the microprogrammed software used in Siemens LOGO!8 BM and SIPLUS LOGO! programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions by manipulating IP...

The vulnerability of microprogrammed software in Siemens LOGO!8 BM and SIPLUS LOGO! controllers arises from incorrect checking of specified indices, positions, or offsets in input data. This allows unauthorized access by attackers to protected information.

The vulnerability of the microprogrammed software of Siemens LOGO!8 BM and SIPLUS LOGO! lies in the improper checking of specified indices, positions, or offsets in input data during TCP packet processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protecte...

The vulnerability of the methods used to verify the structure of TCP packets in Siemens LOGO!8 BM and SIPLUS LOGO! programmable logic controllers allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the methods used to check the structure of TCP packets in Siemens LOGO!8 BM and SIPLUS LOGO! programmable logic controllers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

CVE-2024-47631 WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Logo Carousel – Clients logo carousel for WP responsive-client-logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel – Clients logo carousel for WP: from n/a through = 1....

CVE-2024-47631 WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Logo Carousel – Clients logo carousel for WP responsive-client-logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel – Clients logo carousel for WP: from n/a through = 1....

CVE-2024-47631

CVE-2024-47631: Stored XSS in Logo Carousel – Clients logo carousel for WP (bPlugins LLC) affecting WP plugin versions up to 1.2. Root cause is improper neutralization of input during web page generation. The issue is categorized as a stored XSS with low to moderate impact per CVSS (6.5, CVSS v3....

WordPress plugin Logo Carousel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2024-32689 · WordPress · Logo Carousel

Name of the Vulnerable Software and Affected Versions: Logo Carousel – Clients logo carousel for WP versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, where ...

WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Logo Carousel – Clients logo carousel for WP versions = 1.2...

WordPress Logo Carousel – Clients logo carousel for WP Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Logo Carousel – Clients logo carousel for WP Type Plugin Vulnerable versions = 1.2 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47631 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c59f3b8fd57a Credits Khalid Yusu...

User-Friendly SVN 安全漏洞

User-Friendly SVN USVN is a set of web-based configuration tools for the Subversion codebase from the USVN team. The tool provides features such as creating new projects, managing lists of authorized users, and more. A security vulnerability exists in versions of User-Friendly SVN prior to v1.0.1...

WordPress Logo Manager For Enamad plugin <= 0.7.1 - Admin+ Stored XSS via Widget vulnerability

Admin+ Stored XSS via Widget vulnerability discovered by Bob Matyas in WordPress Plugin Logo Manager For Enamad versions = 0.7.1...

CVE-2024-5170

The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-5170 Logo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via Widget

The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-5170

CVE-2024-5170 affects the WordPress plugin “Logo Manager For Enamad” (versions ≤ 0.7.1). The issue is that widget settings are not properly sanitized/escaped, which could allow a high-privilege user (e.g., Administrator) to perform a Stored XSS attack, even when unfiltered_html is disallowed (suc...