WordPress Plugin HTML5 Maps Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2023-29626 · Unknown · Fla-Shop.Com Html5 Maps

Name of the Vulnerable Software and Affected Versions: Fla-shop.Com HTML5 Maps plugin versions = 1.7.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

SUSE CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

DEBIAN-CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

Cross site scripting

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

UBUNTU-CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

CVE-2023-32721

CVE-2023-32721 is a stored XSS in the Zabbix web application (Maps element) triggered when a URL field contains leading spaces. The issue is documented across multiple feeds as a Zabbix frontend input handling vulnerability with practical impact on stored content and potentially user sessions. Pu...

CVE-2023-32721 Stored XSS in Maps element

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

WordPress HTML5 Maps Plugin <= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software HTML5 Maps Type Plugin Vulnerable versions = 1.7.1.4 Fixed in 1.7.1.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45650 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 414faf6d1725 Credits Mika Required...

CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

CVE-2023-32721: Improper Input Validation

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

WordPress 10Web Map Builder for Google Maps Plugin <= 1.0.73 is vulnerable to Broken Access Control

Software 10Web Map Builder for Google Maps Type Plugin Vulnerable versions = 1.0.73 Fixed in 1.0.74 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-45272 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 599bb14612c3 Credits Abdi...

Maps Component Unauthorized Access

The vulnerability of the Maps component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2023-25989

Cross-Site Request Forgery CSRF vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading...

CVE-2023-25989

Summary: CVE-2023-25989 is a CSRF vulnerability reported across multiple Meks WordPress plugins (Audio Player, Time Ago, ThemeForest Smart Widget, Smart Author Widget, Easy Maps, Easy Photo Feed Widget, Simple Flickr Widget, Easy Ads Widget, Smart Social Widget, and related plugins). The flaw ena...