1037 matches found
WordPress 우커머스 네이버페이 plugin <= 3.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via mnp_purchase Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via mnppurchase Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin 우커머스 네이버페이 versions = 3.3.7...
PT-2024-16846 · WordPress · 우커머스 네이버페이
Name of the Vulnerable Software and Affected Versions: 우커머스 네이버페이 plugin for WordPress versions up to, and including, 3.3.7 Description: The issue is related to Stored Cross-Site Scripting via the plugin's mnp purchase shortcode due to insufficient input sanitization and output escaping on...
WordPress 워드프레스 결제 심플페이 Plugin <= 5.1.4 is vulnerable to Cross Site Scripting (XSS)
Software 워드프레스 결제 심플페이 Type Plugin Vulnerable versions = 5.1.4 Fixed in 5.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11228 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e3d63a499890 Credits Peter Thaleikis Required...
Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments
Threat actors are increasingly banking on a new technique that leverages near-field communication NFC to cash out victim's funds at scale. The technique, codenamed Ghost Tap by ThreatFabric, enables cybercriminals to cash-out money from stolen credit cards linked to mobile payment services such a...
CVE-2024-51918
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Pay With Stripe payments-stripe-gateway allows DOM-Based XSS.This issue affects Pay With Stripe: from n/a through = 1.2.1...
CVE-2024-51918 WordPress Pay With Stripe plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Pay With Stripe payments-stripe-gateway allows DOM-Based XSS.This issue affects Pay With Stripe: from n/a through = 1.2.1...
CVE-2024-51918 WordPress Pay With Stripe plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Pay With Stripe allows DOM-Based XSS.This issue affects Pay With Stripe: from n/a through 1.2.1...
CVE-2024-51918
CVE-2024-51918 is a DOM-based XSS in WordPress Pay With Stripe (plugin) up to version 1.2.1, caused by improper input neutralization during page generation. The CVSS v3.1 base score is 6.5 (Medium); attack vector is network, require user interaction, and the change in scope. References indicate t...
PT-2024-35050 · Freshlight · Freshlight Lab Pay With Stripe
Name of the Vulnerable Software and Affected Versions: Freshlight Lab Pay With Stripe versions 1.2.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an attacke...
WordPress plugin Pay With Stripe 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Pay With Stripe plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Pay With Stripe versions = 1.2.1...
WordPress Pay With Stripe Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
Software Pay With Stripe Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51918 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5765fb19668e Credits SOPROBRO Required privilege Contributor...
CVE-2024-10751
A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit has been disclos...
PT-2024-16514 · Unknown · Codezips Isp Management System
Name of the Vulnerable Software and Affected Versions: Codezips ISP Management System version 1.0 Description: A critical issue was found in the Codezips ISP Management System, affecting some unknown functionality of the file pay.php. The manipulation of the customer argument leads to SQL...
CVE-2024-8083
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /php-ocls/classes/Master.php?f=payorder. The manipulation of the argument id leads to sql injection. The attac...
CVE-2024-41658 GHSL-2024-036: Reflected XSS in QrCodePage.js
Casdoor is a UI-first Identity and Access Management IAM / Single-Sign-On SSO platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via...
WordPress WP Easy Pay plugin <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection vulnerability
Missing Authorization to Unauthenticated Service Disconnection vulnerability discovered by Lucio Sá in WordPress Plugin WP EasyPay versions = 4.2.3...
Meta Given Deadline to Address E.U. Concerns Over 'Pay or Consent' Model
Meta has been given time till September 1, 2024, to respond to concerns raised by the European Commission over its "pay or consent" advertising model or risk-facing enforcement measures, including sanctions. The European Commission said the Consumer Protection Cooperation CPC Network has notified...
