CVE-2024-54297 WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in extremeidea vBSSO-lite vbsso-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through = 1.4.3...

CVE-2024-54297 WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in extremeidea vBSSO-lite vbsso-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through = 1.4.3...

CVE-2024-54297

CVE-2024-54297 affects vBSSO-lite (WordPress plugin) with an Authentication Bypass via an Alternate Path or Channel. The entry covers vBSSO-lite versions from n/a up to 1.4.3, and the Red Hat advisory reiterates the same vulnerability description. Root cause: Missing authorization to privilege es...

CVE-2024-54288 WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through 3.3...

CVE-2024-54288 WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite ldd-directory-lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through = 3.3...

CVE-2024-54288

CVE-2024-54288 affects the WordPress plugin “LDD Directory Lite” up to version 3.3 (names/versions vary in sources). The issue is an Improper Neutralization of Input During Web Page Generation (XSS) leading to a reflected XSS vulnerability. The root cause is insufficient input handling in web pag...

PT-2024-36178 · Unknown · Vbsso-Lite

Name of the Vulnerable Software and Affected Versions: vBSSO-lite versions 1.4.3 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability. This vulnerability allows for authentication bypass in vBSSO-lite. Recommendations: For...

WordPress plugin LDD Directory Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Abandoned Cart Lite for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin vBSSO-lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-36169 · Unknown · Ldd Directory Lite

Name of the Vulnerable Software and Affected Versions: LDD Directory Lite versions n/a through 3.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations: For...

WordPress Ajax Search Lite plugin < 4.12.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ajax Search Lite versions 4.12.4...

CVE-2024-10568 Ajax Search Lite < 4.12.4 - Admin+ Stored XSS

The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-10568 Ajax Search Lite < 4.12.4 - Admin+ Stored XSS

The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-10568

CVE-2024-10568 affects the WordPress plugin “Ajax Search Lite – Live Search & Filter” (versions before 4.12.4). The issue arises from improper sanitisation/escaping of certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) even if unfiltered_html is disallow...

CVE-2024-12536

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/clientdata.php. The manipulation of the argument id leads to cross site scripting. Th...

CVE-2024-12536

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/clientdata.php. The manipulation of the argument id leads to cross site scripting. Th...

CVE-2024-12536 SourceCodester Kortex Lite Advocate Office Management System client_data.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/clientdata.php. The manipulation of the argument id leads to cross site scripting. Th...

CVE-2024-12536

CVE-2024-12536 affects SourceCodester Kortex Lite Advocate Office Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /control/client_data.php file triggered by manipulating the id parameter. Attackers may exploit it remotely; the description notes that the explo...

CVE-2024-12536 SourceCodester Kortex Lite Advocate Office Management System client_data.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/clientdata.php. The manipulation of the argument id leads to cross site scripting. Th...