WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters Type Plugin Vulnerable versions = 1.8.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severit...

PT-2023-11830 · Unknown · Artesãos Seotools

Name of the Vulnerable Software and Affected Versions: Artesãos SEOTools versions up to 0.17.1 Description: A problematic issue was found in Artesãos SEOTools, affecting the makeTag function of the file OpenGraph.php. The manipulation of the value argument leads to open redirect. Recommendations:...

Liferay Portal and Liferay DXP allows arbitrary injection via the site name

Cross-site scripting XSS vulnerability in the Layout module's Open Graph integration before 2.0.4 in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name...

GHSA-3VWW-JRMM-9VFF Liferay Portal and Liferay DXP allows arbitrary injection via the site name

Cross-site scripting XSS vulnerability in the Layout module's Open Graph integration before 2.0.4 in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name...

CVE-2022-26597

Cross-site scripting XSS vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name...

Cross site scripting

Cross-site scripting XSS vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name...

CVE-2022-26597

Cross-site scripting XSS vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name...

CVE-2022-26597

Cross-site scripting XSS vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name...

CVE-2022-26597

This CVE-2022-26597 affects Liferay Portal 7.3.0–7.4.0 (and Liferay DXP 7.3 before Service Pack 3) via the Layout module’s Open Graph integration. The root cause is a cross-site scripting (XSS) vulnerability that lets remote attackers inject arbitrary web script or HTML through the site name. The...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

CVE-2022-26597: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name...

PT-2022-17950

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.0 through 7.4.0 Liferay DXP 7.3 before service pack 3 Description A cross-site scripting XSS issue exists in the Layout module's Open Graph integration, allowing remote attackers to inject arbitrary web script or HT...

WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin <= 1.7.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin versions = 1.7.0. Solution Update the WordPress Go Viral – social share, social sharebar, social locker,...

WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin <= 1.7.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin versions = 1.7.0. Solution Update the WordPress Go Viral – social share, social...

CVE-2021-20831

Cross-site request forgery CSRF vulnerability in OG Tags versions prior to 2.0.2 allows a remote attacker to hijack the authentication of administrators and unintended operation may be performed via unspecified vectors...

CVE-2021-20831

Cross-site request forgery CSRF vulnerability in OG Tags versions prior to 2.0.2 allows a remote attacker to hijack the authentication of administrators and unintended operation may be performed via unspecified vectors...

Prototype Pollution in open-graph

This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a proto or constructor payload...

silverscreen (>=0.1.0, <=0.1.2) potentially affected by CVE-2021-23419 via open-graph (0.1.7)

open-graph NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on open-graph and may be impacted: - silverscreen =0.1.0, =0.1.2 Source cves: CVE-2021-23419 Source advisory: OSV:GHSA-G452-6RFC-VRVX...

GHSA-G452-6RFC-VRVX Prototype Pollution in open-graph

This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a proto or constructor payload...

Prototype Pollution

open-graph is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...