7909 matches found
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...
CVE-2023-44986
CVE-2023-44986 affects WordPress plugin Abandoned Cart Lite for WooCommerce (Tyche Softwares) version
CVE-2023-44986 WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...
WordPress Plugin Abandoned Cart Lite for WooCommerce Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress Plugin mediabay-lite Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress Bold Timeline Lite Plugin <= 1.1.9 is vulnerable to Broken Access Control
Software Bold Timeline Lite Type Plugin Vulnerable versions = 1.1.9 Fixed in 1.2.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-45110 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bdcbeb46656d Credits Abdi Pranata Required...
CVE-2023-22618
If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...
CVE-2023-25788
Cross-Site Request Forgery CSRF vulnerability in Saphali Saphali Woocommerce Lite plugin = 1.8.13 versions...
CVE-2023-25788
Cross-Site Request Forgery CSRF vulnerability in Saphali Saphali Woocommerce Lite plugin = 1.8.13 versions...
CVE-2023-25788
CVE-2023-25788 is a CSRF vulnerability in the Saphali Woocommerce Lite WordPress plugin, affected versions
WordPress Plugin Saphali Woocommerce Lite Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Saphali...
PT-2023-20304 · WordPress · Saphali Woocommerce Lite
Name of the Vulnerable Software and Affected Versions: Saphali Woocommerce Lite plugin versions = 1.8.13 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...
WordPress WooODT Lite Plugin <= 2.4.7 is vulnerable to Cross Site Scripting (XSS)
Software WooODT Lite Type Plugin Vulnerable versions = 2.4.7 Fixed in 2.4.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45006 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4ca8f692a25b Credits Le Ngoc Anh Required...
WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)
Software Abandoned Cart Lite for WooCommerce Type Plugin Vulnerable versions = 5.15.2 Fixed in 5.16.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44986 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3d15bd807ee2 Credits Robert DeVore...
WordPress Modern Events Calendar Lite Plugin < 7.1.0 is vulnerable to Cross Site Scripting (XSS)
Software Modern Events Calendar Lite Type Plugin Vulnerable versions 7.1.0 Fixed in 7.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4021 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c25775cbcad2 Credits Marco Wotschka...
CVE-2023-42147
An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component...
CVE-2023-42147
An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component...
Design/Logic Flaw
An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component...
CVE-2023-42147
CVE-2023-42147 affects CloudExplorer Lite 1.3.1, with the vulnerable component described as the login key. The available documents state that an attacker can obtain sensitive information via this component, indicating a confidentiality impact (high) per CVSS 3.1 metrics. The root cause is not exp...
