16 matches found
EUVD-2024-30345
Malicious code in bioql PyPI...
CVE-2024-32543
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Minoji MJ Update History allows Reflected XSS.This issue affects MJ Update History: from n/a through 1.0.4...
MJ Update History <= 1.0.4 - Missing Authorization
Description The MJ Update History plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.0.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an...
CVE-2024-35671
Missing Authorization vulnerability in Minoji MJ Update History.This issue affects MJ Update History: from n/a through 1.0.4...
CVE-2024-35671
CVE-2024-35671 concerns the WordPress plugin “MJ Update History.” The CVE notes a Missing Authorization vulnerability in MJ Update History, affecting versions from n/a through 1.0.4. The public data cites a CVSS v3.1 base score of 4.3 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. The ...
PT-2024-26618
Name of the Vulnerable Software and Affected Versions Minoji MJ Update History versions 1.0.4 and earlier Description The issue is related to a Missing Authorization vulnerability in Minoji MJ Update History. Recommendations For versions 1.0.4 and earlier, at the moment, there is no information...
CVE-2024-35671: Missing Authorization
Missing Authorization vulnerability in Minoji MJ Update History.This issue affects MJ Update History: from n/a through 1.0.4...
WordPress MJ Update History plugin <= 1.0.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin MJ Update History versions = 1.0.4...
CVE-2024-32543
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Minoji MJ Update History allows Reflected XSS.This issue affects MJ Update History: from n/a through 1.0.4...
CVE-2024-32543 WordPress MJ Update History plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Minoji MJ Update History allows Reflected XSS.This issue affects MJ Update History: from n/a through 1.0.4...
CVE-2024-32543 WordPress MJ Update History plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Minoji MJ Update History allows Reflected XSS.This issue affects MJ Update History: from n/a through 1.0.4...
CVE-2024-32543: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Minoji MJ Update History allows Reflected XSS.This issue affects MJ Update History: from n/a through 1.0.4...
PT-2024-24663
Name of the Vulnerable Software and Affected Versions Minoji MJ Update History versions 1.0.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can inject...
WordPress Plugin MJ Update History 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...
WordPress MJ Update History plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin MJ Update History versions = 1.0.4...
WordPress MJ Update History Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)
Software MJ Update History Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32543 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6f5d10b529f0 Credits Dimas Maulana Required privilege...