89 matches found
Locatoraid Store Locator < 3.9.24 - Reflected XSS
Description The plugin does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Setup as admin: - Locatoraid Configuration Google Maps Enter "none" at...
CVE-2023-32576
Auth. subscriber+ Stored Cross-Site Scripting' vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.18 versions...
Cross site scripting
Auth. subscriber+ Stored Cross-Site Scripting' vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.18 versions...
CVE-2023-32576 WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)
Auth. subscriber+ Stored Cross-Site Scripting' vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.18 versions...
CVE-2023-32576
CVE-2023-32576 affects the WordPress plugin Locatoraid Store Locator (Locatoraid) up to version 3.9.18. The issue is a Stored Cross-Site Scripting (XSS) vulnerability that requires Subscriber privileges to exploit. PatchStack confirms the fix was released in version 3.9.19. Public references also...
CVE-2023-32576 WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)
Auth. subscriber+ Stored Cross-Site Scripting' vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.18 versions...
WordPress plugin Locatoraid Store Locator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2023-23883
Name of the Vulnerable Software and Affected Versions Plainware Locatoraid Store Locator plugin versions 3.9.18 and earlier Description The issue is related to a Stored Cross-Site Scripting vulnerability that affects authenticated users, specifically those with subscriber or higher privileges...
CVE-2023-32576: Improper Neutralization of Input During Web Page Generation
Auth. subscriber+ Stored Cross-Site Scripting' vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.18 versions...
CVE-2023-2031
The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2023-2031
The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
Cross site scripting
The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2023-2031
CVE-2023-2031 affects Locatoraid Store Locator (WordPress) with Stored XSS in shortcode attributes due to insufficient input sanitization and output escaping. Affected in versions up to 3.9.14; requires contributor-level+ authentication; can inject scripts executed on page load. Mitigation: updat...
CVE-2023-2031 Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2023-17428 · WordPress · Locatoraid Store Locator
Name of the Vulnerable Software and Affected Versions: Locatoraid Store Locator plugin for WordPress versions up to, and including, 3.9.14 Description: The issue is related to Stored Cross-Site Scripting via the plugin's shortcodes due to insufficient input sanitization and output escaping on use...
CVE-2023-2031: Improper Neutralization of Input During Web Page Generation
The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
WordPress Plugin Locatoraid Store Locator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)
Software Locatoraid Store Locator Type Plugin Vulnerable versions = 3.9.18 Fixed in 3.9.19 OWASP Top 10 A5: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2023-32576 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 48ffad270d6d Credits Abdi...
WordPress Locatoraid Store Locator Plugin <= 3.9.14 is vulnerable to Cross Site Scripting (XSS)
Software Locatoraid Store Locator Type Plugin Vulnerable versions = 3.9.14 Fixed in 3.9.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2031 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID c58a334fcc5f Credits Alex...