Cross site scripting

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

CVE-2022-4832 Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

CVE-2022-4832

The CVE-2022-4832 entry applies to the Store Locator WordPress plugin prior to version 1.4.9. The underlying issue is failure to validate/escape certain shortcode attributes, allowing Stored XSS. The attack can be executed by users with as little as Contributor privileges to target higher-privile...

WordPress plugin Store Locator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

CVE-2022-4832: Undefined Security Weakness

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

PT-2023-15697 · WordPress · Store Locator

Name of the Vulnerable Software and Affected Versions: Store Locator WordPress plugin versions prior to 1.4.9 Description: The issue concerns a lack of validation and escaping of certain shortcode attributes, which can lead to Stored Cross-Site Scripting attacks. Users with a role as low as...

MacGeiger 注入漏洞

MacGeiger is a WIFI AP locator utility by rofl0r individual developers. MacGeiger suffers from an injection vulnerability that originates in the function dumpwlanat in the file macgeiger. c that can lead to injection...

WordPress Store Locator WordPress Plugin < 1.4.9 is vulnerable to Cross Site Scripting (XSS)

Software Store Locator WordPress Type Plugin Vulnerable versions 1.4.9 Fixed in 1.4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4832 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 643ae0b35cd8 Credits István Márto...

Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Exploit...

Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. PoC Exploit...

CVE-2022-41615

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

CVE-2022-41615

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

Cross site request forgery (csrf)

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

CVE-2022-41615

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

CVE-2022-41615 WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

CVE-2022-41615

The CVE concerns the WordPress Store Locator plugin (versions

PT-2022-25986 · WordPress · Store Locator

Name of the Vulnerable Software and Affected Versions: Store Locator plugin versions = 1.4.5 Description: The issue is related to a Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability. This vulnerability can be exploited to execute malicious scripts on the client-side...

WordPress plugin Store Locator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2022-41615: Cross-Site Request Forgery (CSRF)

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

The vulnerability of the HTTP(S) control module for operating systems HiOS with Belden Hirschmann network switches of the RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, and RED series, as well as the operating system HiSecOS with Belden Hirschmann network switches of the EAGLE20/30 series, allows a perpetrator to cause service interruptions.

The vulnerability of the HTTPS control module for operating systems HiOS and network switches from Belden Hirschmann, models RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, as well as the operating system HiSecOS for network switches from Belden Hirschmann, model EAGLE20/30, is related to th...