EUVD-2024-37002

Malicious code in bioql PyPI...

CVE-2024-37476

Cross Site Scripting XSS vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1...

CVE-2024-37476

Cross Site Scripting XSS vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1...

CVE-2024-37476 WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1...

CVE-2024-37476 WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1...

CVE-2024-37476

CVE-2024-37476 is a Stored XSS affecting Automattic Newspack Campaigns (WordPress plugin) up to version 2.31.1. The vulnerability is confirmed in WordPress ecosystem sources; remediation is to upgrade Newspack Campaigns to a version where the fix is in place (patched). No exploitation activity is...

WordPress plugin Newspack Campaigns security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-27585 · Automattic · Newspack Campaigns

Name of the Vulnerable Software and Affected Versions: Newspack Campaigns versions 2.31.1 and earlier Description: The issue is a Cross Site Scripting XSS vulnerability, specifically a Stored XSS, in Automattic Newspack Campaigns. This allows for malicious scripts to be stored on the server and...

WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Newspack Campaigns versions = 2.31.1...

WordPress Newspack Campaigns Plugin <= 2.31.1 is vulnerable to Cross Site Scripting (XSS)

Software Newspack Campaigns Type Plugin Vulnerable versions = 2.31.1 Fixed in 2.31.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37476 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0b7e9fddfca4 Credits Rafie Muhammad Patchstack Require...