Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Leo Caseiro Custom Options Plus plugin = 1.8.1 versions...

CVE-2023-28420 WordPress Custom Options Plus Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Leo Caseiro Custom Options Plus plugin = 1.8.1 versions...

CVE-2023-28420 WordPress Custom Options Plus Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Leo Caseiro Custom Options Plus plugin = 1.8.1 versions...

CVE-2023-28420

CVE-2023-28420 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Custom Options Plus by Leo Caseiro, affecting versions ≤ 1.8.1 . The issue is a CSRF flaw that could allow unauthorized actions on behalf of an authenticated user. Public documentation lists this as...

PT-2023-21707 · WordPress · Leo Caseiro Custom Options Plus

Name of the Vulnerable Software and Affected Versions: Leo Caseiro Custom Options Plus plugin versions prior to 1.8.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

leo-kofler.de Improper Access Control vulnerability OBB-3771276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39639

LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs...

CVE-2023-39639

LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs...

PT-2023-27042 · Unknown · Leotheme Leoblog

Name of the Vulnerable Software and Affected Versions: LeoTheme leoblog versions up to 3.1.2 Description: The issue is related to a SQL injection vulnerability. It affects the component LeoBlogBlog::getListBlogs. There is no information provided about the estimated number of potentially affected...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

CVE-2023-38915

The CVE-2023-38915 entry refers to Wolf-leo EasyAdmin8 v.1.0 with a File Upload vulnerability in the upload type function, enabling remote arbitrary code execution. Root cause is an unrestricted file upload pathway that allows attackers to execute code on the server. Affected product/version: Wol...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

PT-2023-26685 · Wolf Leo · Wolf-Leo Easyadmin8

Name of the Vulnerable Software and Affected Versions: Wolf-leo EasyAdmin8 version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the upload type function. This is a result of a File Upload vulnerability in the software. Recommendations: For Wolf-leo EasyAdmin8...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

leo-univ-orleans.fr Cross Site Scripting vulnerability OBB-3433510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

leo-tax.de Cross Site Scripting vulnerability OBB-3175378

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

panthera-leo.de Improper Access Control vulnerability OBB-2402953

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

leo-ce.com Cross Site Scripting vulnerability OBB-2327828

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-X38Q-XG2H-RXGX Regular Expression Denial of Service in Leo Editor

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...