PT-2024-32626

Name of the Vulnerable Software and Affected Versions Netgsm versions 2.9.16 and earlier Description A Missing Authorization issue affects the software, potentially allowing unauthorized access. Recommendations For versions 2.9.16 and earlier, update to a version that includes a fix for this issu...

CVE-2024-4746: Missing Authorization

Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through = 2.9.32...

CVE-2024-35672

Missing Authorization vulnerability in Netgsm.This issue affects Netgsm: from n/a through 2.9.19...

CVE-2024-35672

Missing Authorization vulnerability in Netgsm.This issue affects Netgsm: from n/a through 2.9.19...

CVE-2024-35672 WordPress Netgsm plugin <= 2.9.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in Netgsm.This issue affects Netgsm: from n/a through 2.9.19...

CVE-2024-35672 WordPress Netgsm plugin <= 2.9.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in Netgsm.This issue affects Netgsm: from n/a through 2.9.19...

PT-2024-26619 · Netgsm · Netgsm

Name of the Vulnerable Software and Affected Versions: Netgsm versions 2.9.19 and earlier Description: The issue is related to a Missing Authorization vulnerability in Netgsm. Recommendations: For versions 2.9.19 and earlier, update to a version that contains a fix for this issue. At the moment,...

CVE-2024-35672: Missing Authorization

Missing Authorization vulnerability in Netgsm.This issue affects Netgsm: from n/a through 2.9.19...

WordPress Netgsm plugin <= 2.9.19 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Netgsm versions = 2.9.19...

WordPress Netgsm Plugin <= 2.9.19 is vulnerable to Broken Access Control

Software Netgsm Type Plugin Vulnerable versions = 2.9.19 Fixed in 2.9.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35672 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID ec4277f3436d Credits Majed Refaea Required privilege...

Netgsm <= 2.9.16 - Missing Authorization

Description The Netgsm plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.9.16. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action...

WordPress Netgsm plugin <= 2.9.32 - Broken Access Control + CSRF vulnerability

Broken Access Control + CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Netgsm versions = 2.9.32...

WordPress Netgsm Plugin <= 2.9.32 is vulnerable to Broken Access Control

Software Netgsm Type Plugin Vulnerable versions = 2.9.32 Fixed in 2.9.33 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4746 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 07b1b0c3155d Credits Dhabaleshwar Das Required privilege...

Netgsm < 2.9.1 - Reflected Cross-Site Scripting

Description The Netgsm plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-32544

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Netgsm allows Reflected XSS.This issue affects Netgsm: from n/a through 2.8...

CVE-2024-32544 WordPress Netgsm plugin <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Netgsm allows Reflected XSS.This issue affects Netgsm: from n/a through 2.8...

CVE-2024-32544 WordPress Netgsm plugin <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Netgsm allows Reflected XSS.This issue affects Netgsm: from n/a through 2.8...

CVE-2024-32544

CVE-2024-32544 (Netgsm WordPress Plugin) is a Reflected XSS vulnerability affecting Netgsm for WordPress up to version 2.8. The Netgsm plugin’s input is improperly neutralized during web page generation, enabling a reflected cross-site scripting attack. The connected sources list this as a fixed ...

WordPress Plugin Netgsm 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2024-24664 · Netgsm · Netgsm

Name of the Vulnerable Software and Affected Versions: Netgsm versions n/a through 2.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject malicious...