54 matches found
WordPress MyBookTable Bookstore Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)
Software MyBookTable Bookstore Type Plugin Vulnerable versions = 3.3.9 Fixed in 3.5.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-43255 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 8cdffe075f8d Credits Majed Refaea...
CVE-2024-29772
CVE-2024-29772 is an XSS vulnerability in Stormhill Media MyBookTable Bookstore for WordPress, described as Stored XSS due to improper neutralization of input during web page generation. Affected: MyBookTable Bookstore plugin (WordPress) up to version 3.3.7. The provided sources do not specify ex...
CVE-2024-29772 WordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stormhill Media MyBookTable Bookstore allows Stored XSS.This issue affects MyBookTable Bookstore: from n/a through 3.3.7...
WordPress Plugin MyBookTable Bookstore by Stormhill Media 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-23014 · Unknown · Mybooktable Bookstore
Name of the Vulnerable Software and Affected Versions: MyBookTable Bookstore versions 3.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject...
WordPress MyBookTable Bookstore Plugin <= 3.3.7 is vulnerable to Cross Site Scripting (XSS)
Software MyBookTable Bookstore Type Plugin Vulnerable versions = 3.3.7 Fixed in 3.3.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2024-29772 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b4a056c5d251 Credits CatFather Required...
CVE-2023-48331
Cross-Site Request Forgery CSRF vulnerability in Stormhill Media MyBookTable Bookstore by Stormhill Media allows Cross Site Request Forgery.This issue affects MyBookTable Bookstore by Stormhill Media: from n/a through 3.3.4...
CVE-2023-48331
Cross-Site Request Forgery CSRF vulnerability in Stormhill Media MyBookTable Bookstore by Stormhill Media allows Cross Site Request Forgery.This issue affects MyBookTable Bookstore by Stormhill Media: from n/a through 3.3.4...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Stormhill Media MyBookTable Bookstore by Stormhill Media allows Cross Site Request Forgery.This issue affects MyBookTable Bookstore by Stormhill Media: from n/a through 3.3.4...
CVE-2023-48331
CVE-2023-48331 describes a CSRF vulnerability in the WordPress plugin MyBookTable Bookstore (Stormhill Media) up to version 3.3.4. The issue arises from a CSRF check omission in the mbt_api_key_refresh_ajax() flow, allowing unauthorized actions to be performed on affected installations. The entry...
WordPress MyBookTable Bookstore Plugin <= 3.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software MyBookTable Bookstore Type Plugin Vulnerable versions = 3.3.4 Fixed in 3.3.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48331 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ac06dff1976c Credits Nguyen Xuan...
WordPress MyBookTable plugin <= 3.2.2 - Multiple Cross-Site Scripting (XSS) vulnerabilities
Multiple Cross-Site Scripting XSS vulnerabilities found in WordPress MyBookTable plugin versions = 3.2.2. Solution Update the WordPress MyBookTable plugin to the latest available version at least 3.2.3...
MyBookTable <= 3.2.2 - Multiple XSS
Version WPScan Team: v3.2.2 implemented numerous sanitisation improvements, however there was still at least one DOM XSS: https:///wp-admin/admin.php?page=mbthelpvideotutorial= June 30th - Vendor Contacted about the DOM XSS June 30th - Fix pushed in Trunk, vendor also reviewed all other usage of...