Optima Express + MarketBoost IDX < 7.3.1 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-30749

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin = 7.3.0 versions...

CVE-2023-30749

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin = 7.3.0 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin = 7.3.0 versions...

CVE-2023-30749

CVE-2023-30749: Stored XSS vulnerability in WordPress plugin Optima Express + MarketBoost IDX Plugin (admin+). Affected versions:

CVE-2023-30749 WordPress Optima Express + MarketBoost IDX Plugin Plugin <= 7.3.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin = 7.3.0 versions...

CVE-2023-30749 WordPress Optima Express + MarketBoost IDX Plugin Plugin <= 7.3.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin = 7.3.0 versions...

WordPress plugin Optima Express + MarketBoost IDX Plugin Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

ABB Advance Optima OPC 代码问题漏洞

ABB Advance Optima OPC is a modular analysis device from ABB. A code issue vulnerability exists in ABB Advance Optima OPC version 3.2.1.0, which is caused by the absence of quotes in the directory information of the service entry, and can be exploited by an attacker to invoke applications other...

Warning issued over vulnerability in cardiac device monitoring software

The Cybersecurity and Infrastructure Security Agency CISA has issued a warning about a vulnerability that could result in remote code execution or a denial-of-service DoS condition impacting a healthcare delivery organizations Paceart Optima system. Paceart Optima is a software application that...

The vulnerability of the Paceart Messaging Service in the Paceart Optima cardiac monitoring system allows a perpetrator to gain unauthorized access to read, modify, or delete data, execute arbitrary code, or trigger a service failure.

The vulnerability of the Paceart Messaging Service in the Paceart Optima cardiac monitoring system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to read, modify, or delete data, execute...

CVE-2023-31222

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

CVE-2023-31222

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

Deserialization of untrusted data

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

CVE-2023-31222

CVE-2023-31222 affects Medtronic Paceart Optima, specifically versions 1.11 and earlier, where Deserialization of untrusted data via the Microsoft Messaging Queuing Service in Paceart Messaging Service can allow an unauthenticated, network-accessing attacker to impact a Paceart Optima cardiac dev...

CISA Releases Nine Industrial Control Systems Advisories

CISA released nine Industrial Control Systems ICS advisories on June 29, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-180-01 Delta Electronics InfraSuite Device Master ICSA-23-180-02 Schneider Electric...

Medtronic Paceart Optima System

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Medtronic Equipment: Paceart Optima System Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could result in remote code execution or a...

Medtronic Paceart Optima 代码问题漏洞

Medtronic Paceart Optima is a comprehensive workflow solution from Medtronic, Inc. to efficiently compile and manage patient cardiac device data. A security vulnerability exists in Medtronic Paceart Optima version 1.11 and prior versions that originates from a data deserialization issue in...

PT-2023-3388 · Medtronic +1 · Paceart Optima +1

Name of the Vulnerable Software and Affected Versions: Medtronic's Paceart Optima versions 1.11 and earlier Description: The issue is related to the deserialization of untrusted data in the Microsoft Messaging Queuing Service of Medtronic's Paceart Optima system. This allows an unauthorized user ...

WordPress Optima Express + MarketBoost IDX Plugin Plugin <= 7.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Optima Express + MarketBoost IDX Plugin Type Plugin Vulnerable versions = 7.3.0 Fixed in 7.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30749 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f3093396364d Credits...