WordPress plugin Pet Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Pet Manager Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Pet Manager Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3917 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d50e54d0e73b Credits Bob Matyas Required...

PT-2024-28380 · WordPress · Pet Manager

Name of the Vulnerable Software and Affected Versions: Pet Manager WordPress plugin versions 1.4 and earlier Description: The issue concerns the Pet Manager WordPress plugin, which does not properly sanitise and escape some of its Pet settings. This could allow high-privilege users, such as...

WordPress plugin Pet Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2024-3918: Improper Neutralization of Input During Web Page Generation

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...

Pet Manager <= 1.4 - Contributor+ Stored XSS

Description The plugin does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks. PoC 1. Go to "Pets Add Pet" 2. In the "Address" field add the payload " style=animation-name:rotation...

Pet Manager <= 1.4 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC 1. Add a pet and publish the listing 2. View the pet on the frontend of the site...

Pet Manager <= 1.4 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin 1. Add a pet and publish the listing 2. View the pet on the frontend of the site and ge...

Pet Manager <= 1.4 - Contributor+ Stored XSS

Description The plugin does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks. 1. Go to "Pets Add Pet" 2. In the "Address" field add the payload " style=animation-name:rotation...

underdogpetfooddelivery.com Cross Site Scripting vulnerability OBB-3919294

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mars: CSRF in Delete Pet Function

The Delete Pet functionality on the ████████ platform was found to be vulnerable to Cross-Site Request Forgery CSRF. The vulnerability was discovered in the pet deletion endpoint, where the pet ID parameter could be manipulated to force authenticated users to delete their pets without their...

MAL-2024-1064 Malicious code in pet-profile-micro-interaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd98e11aca525f441300cc29d3cebd96d52cee8d8620e951a805b48fe9305d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pet-profile-micro-interaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd98e11aca525f441300cc29d3cebd96d52cee8d8620e951a805b48fe9305d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in pet-profile-micro-interaction

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

pet-kobe.net Improper Access Control vulnerability OBB-3860180

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

underdogpetfooddelivery.com Cross Site Scripting vulnerability OBB-3847229

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mars: CSRF resulting in adding pet at ███████

A Cross-Site Request Forgery CSRF vulnerability was discovered in the application, allowing an attacker to forge requests to add pets to the victim's account, provided the attacker knew the victim's account ID...

pet-friendly-hotels.net Cross Site Scripting vulnerability OBB-3830049

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cooperpetcare.com Improper Access Control vulnerability OBB-3820823

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

petmemorialcenter.ca Cross Site Scripting vulnerability OBB-3804334

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...