CVE-2022-41638

Auth. Stored Cross-Site Scripting XSS in Pop-Up Chop Chop plugin = 2.1.7 on WordPress...

Cross site scripting

Auth. Stored Cross-Site Scripting XSS in Pop-Up Chop Chop plugin = 2.1.7 on WordPress...

CVE-2022-41638 WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS in Pop-Up Chop Chop plugin = 2.1.7 on WordPress...

CVE-2022-41638

The CVE-2022-41638 entry concerns the WordPress plugin Pop-Up Chop Chop (versions

CVE-2022-41638: Improper Neutralization of Input During Web Page Generation

Auth. Stored Cross-Site Scripting XSS in Pop-Up Chop Chop plugin = 2.1.7 on WordPress...

WordPress Plugin Pop-Up Chop Chop 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Stored Cross-Site Scripting (XSS)

Description There is insufficient input validation in the pop-up notifications. Proof of Concept Steps to reproduce: 1. Log in to an admin account 2. Click on Services - Services Templates 3. Create a new Service Template with the Name alertdocument.location 4. The XSS is triggered when the...

EyesOfNetwork SQL Injection Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. EyesOfNetwork EON 5.3.11 and prior versions...

EyesOfNetwork Local File Inclusion Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides business process configuration tools, generates pop-up windows when events occur in the active queue, and other features.EyesOfNetwork EON 5.3.11 and earlier versions have a...

WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Pop-Up Chop Chop plugin versions = 2.1.7. Solution No patched version is available. No reply from the vendor...

Stored Cross-Site Scripting (XSS)

Description There is insufficient input validation in the pop-up notifications. Proof of Concept Steps to reproduce: 1. Log in to an admin account 2. Click on Ports - Manage Groups 3. Create a new Port Group with the Name alertdocument.location and an arbitrary Description 4. The XSS is triggered...

PT-2022-33781 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the bpf and involves not reinitializing the map value in prealloc lru pop. The actual impact and potential for attack have not been proven yet. Recommendations: For...

CVE-2022-38070

Privilege Escalation subscriber+ vulnerability in Pop-up plugin = 1.1.5 at WordPress...

Privilege escalation

Privilege Escalation subscriber+ vulnerability in Pop-up plugin = 1.1.5 at WordPress...

CVE-2022-38070

CVE-2022-38070 affects the WordPress Pop-up plugin versions ≤ 1.1.5. The issue is a Privilege Escalation impacting subscribers+ (per the CVE entry), with no explicit exploitation details provided in the supplied documents. Root cause/technical specifics are not detailed beyond the vulnerability c...

CVE-2022-38070: Undefined Security Weakness

Privilege Escalation subscriber+ vulnerability in Pop-up plugin = 1.1.5 at WordPress...

PT-2022-24186 · Unknown · Pop-Up Plugin

Name of the Vulnerable Software and Affected Versions: Pop-up plugin versions 1.1.5 and earlier Description: The issue is related to a Privilege Escalation vulnerability that affects subscribers and above, allowing potential escalation of privileges. Recommendations: For Pop-up plugin versions...

The vulnerability of the Mozilla Firefox browser, related to incorrect resource cleanup or release, allows a perpetrator to cause a service failure.

The vulnerability of the Mozilla Firefox browser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions by opening multiple pop-up windows...

CVE-2022-2442

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to deserialization of untrusted input via the 'path' parameter in versions up to, and including 0.9.74. This makes it possible for authenticated attackers with administrative privileges to call files using a PHAR wrapper...

Deserialization of untrusted data

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'almrepeatersexport' parameter in versions up to, and including 5.5.3. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they...