219 matches found
CVE-2024-49662 WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...
PT-2024-33614 · Unknown · Webgensis Simple Load More
Name of the Vulnerable Software and Affected Versions: Webgensis Simple Load More versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...
WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Simple Load More versions = 1.0...
WordPress Simple Load More Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Simple Load More Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49662 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cc90907a6e66 Credits Mika Required privilege...
The vulnerability of the WordPress Infinite Scroll plugin – the Ajax Load More feature of the WordPress content management system – relates to the lack of security measures for website structures. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the WordPress Infinite Scroll plugin – the Ajax Load More feature of the WordPress content management system – is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...
CVE-2024-8505
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘buttonlabel’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2024-8505
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘buttonlabel’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2024-8505 WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘buttonlabel’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
WordPress Ajax Load More plugin <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via buttonlabel Parameter vulnerability discovered by Robert DeVore in WordPress Plugin Ajax Load More versions = 7.1.2...
WordPress Ajax Load More Plugin <= 7.1.2 is vulnerable to Cross Site Scripting (XSS)
Software Ajax Load More Type Plugin Vulnerable versions = 7.1.2 Fixed in 7.1.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8505 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 333f5ab48634 Credits Robert DeVore Required...
CVE-2024-8728 Easy Load More <= 1.0.3 - Reflected Cross-Site Scripting
The Easy Load More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...
CVE-2024-8728 Easy Load More <= 1.0.3 - Reflected Cross-Site Scripting
The Easy Load More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...
CVE-2024-8728
CVE-2024-8728 affects the WordPress plugin Easy Load More (versions ≤ 1.0.3). It enables Reflected Cross-Site Scripting due to insufficient escaping of add_query_arg, allowing unauthenticated attackers to inject scripts when a user is tricked into clicking a link. The provided documents do not sp...
WordPress Easy Load More plugin <= 1.0.3 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Easy Load More versions = 1.0.3...
WordPress plugin Easy Load More 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...
PT-2024-39207 · WordPress · Easy Load More
Name of the Vulnerable Software and Affected Versions: Easy Load More plugin for WordPress versions up to, and including, 1.0.3 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitrary web scripts in...
WordPress Easy Load More Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Easy Load More Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8728 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 59f09f12d886 Credits vgo0 Required privile...
PT-2024-6634 · WordPress · Wordpress Infinite Scroll – Ajax Load More
Name of the Vulnerable Software and Affected Versions: WordPress Infinite Scroll – Ajax Load More plugin versions up to, and including, 7.1.2 Description: The issue is related to insufficient input sanitization and output escaping, allowing for Stored Cross-Site Scripting attacks. This can be...