CVE-2023-28693

CVE-2023-28693 describes an unauthenticated Reflected Cross-Site Scripting (XSS) in the WordPress plugin Balasaheb Bhise Advanced Youtube Channel Pagination , version)

WordPress plugin Advanced Youtube Channel Pagination 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-26183 · Kubepi · Kubepi

Name of the Vulnerable Software and Affected Versions: KubePi versions prior to 1.6.5 Description: The issue concerns the leakage of password hashes for any user, including administrators, through the /kubepi/api/v1/users/search endpoint. This could allow a motivated attacker to crack the leaked...

CVE-2023-28778

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in BestWebSoft Pagination plugin = 1.2.2 versions...

CVE-2023-28778

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in BestWebSoft Pagination plugin = 1.2.2 versions...

CVE-2023-28778 WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in BestWebSoft Pagination plugin = 1.2.2 versions...

CVE-2023-28778

CVE-2023-28778 concerns the WordPress plugin Pagination by BestWebSoft (

CVE-2023-28778 WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in BestWebSoft Pagination plugin = 1.2.2 versions...

WordPress plugin Pagination 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in usaa-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d9fe4420ea18c84929d5f69ae4aee3195444c279f3e9a7653bf5e6b992723a The OpenSSF Package Analysis project identified 'usaa-pagination' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1331 Malicious code in usaa-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d9fe4420ea18c84929d5f69ae4aee3195444c279f3e9a7653bf5e6b992723a The OpenSSF Package Analysis project identified 'usaa-pagination' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ajax Pagination and Infinite Scroll Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A2: Broken Authentication Classification Cross Site Request Forgery CSRF CVE CVE-2023-34033 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 411a2149f500 Credits...

SUSE-SU-2023:2298-1 Security update for distribution

This update for distribution fixes the following issues: Update to verison 2.8.2: - Revert registry/client: set Accept: identity header when getting layers - Parse http forbidden as denied - Fix CVE-2023-2253 runaway allocation on /v2/catalog bsc1207705 - Fix panic in inmemory driver - update to...

Image Builder security, bug fix, and enhancement update

cockpit-composer 45-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095 45-1 - New upstream release 44-1 - New upstream release 43-1 - New upstream release 42-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release...

CVE-2023-28884

In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index...

Pagination by BestWebSoft < 1.2.3 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

PT-2023-22031

Name of the Vulnerable Software and Affected Versions MISP version 2.4.169 Description The issue allows for XSS in the community index due to a vulnerability in the CustomPaginationTool.php file. Recommendations For MISP version 2.4.169, update to a version that fixes the issue in the...

WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Pagination by BestWebSoft Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28778 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d02b9efe4691 Credits Rio Darmawan...

CVE-2023-28884

CVE-2023-28884: In MISP 2.4.169, the vulnerability resides in app/Lib/Tools/CustomPaginationTool.php, allowing cross-site scripting in the community index. The issue is documented across multiple sources (NVD/OSV/Red Hat) with the impact described as XSS and a base CVSS 3.1 score of 6.1 (Medium)....

Flickr: High resource consumption by insufficient sanitization of forum threads pagination

The forum threads pagination functionality was insufficiently sanitized, leading to high resource consumption. When a page number was provided in the URL that exceeded the number of available pages, an infinite loop was triggered, generating excessive markup on each iteration. The issue was...