Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Hosting Pay with Vipps and MobilePay for WooCommerce allows Stored XSS.This issue affects Pay with Vipps and MobilePay for WooCommerce: from n/a through 1.14.13...

CVE-2023-51485 WordPress Pay with Vipps for WooCommerce Plugin <= 1.14.13 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Hosting Pay with Vipps and MobilePay for WooCommerce allows Stored XSS.This issue affects Pay with Vipps and MobilePay for WooCommerce: from n/a through 1.14.13...

CVE-2023-51485

CVE-2023-51485 is a Cross-Site Scripting (Stored XSS) vulnerability in the WordPress plugin “Pay with Vipps for WooCommerce” (WP Pay with Vipps). The issue arises from improper neutralization of user input during web page generation, allowing stored XSS. Affected versions are up to 1.14.13 (inclu...

Novel-Plus Security Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A security vulnerability exists in Novel-Plus version v4.3.0-RC1 and earlier versions. An attacker can exploit the vulnerability to pass specially crafted offset, limit, and sort parameters to perform a SQL injectio...

CVE-2024-24013

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /novel/pay/list...

PT-2024-20232 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 4.3.0-RC1 and prior Description: A SQL injection issue exists, allowing an attacker to perform SQL injection by passing crafted offset, limit, and sort parameters via the "/novel/pay/list" API endpoint. Recommendations: Fo...

PT-2024-17507 · Qibosoft · Qibocms X1

Name of the Vulnerable Software and Affected Versions: QiboSoft QiboCMS X1 versions up to 1.0.6 Description: A critical vulnerability was found in the function rmb pay of the file /application/index/controller/Pay.php. The manipulation of the argument callback class leads to deserialization. The...

PT-2024-15888 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue was found in the system, affecting the prepare function of the admin/pay.php file. The manipulation of the id argument leads to SQL injection...

CVE-2024-0301

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

WordPress Pay with Vipps for WooCommerce Plugin <= 1.14.13 is vulnerable to Cross Site Scripting (XSS)

Software Pay with Vipps for WooCommerce Type Plugin Vulnerable versions = 1.14.13 Fixed in 1.14.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51485 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1edf8f900665 Credits resecured.io Requir...

The status of VDA machine was "Stopped" instead of "Stopped (Deallocated)" on Azure Portal

The following behavior was confirmed for dedicated machines created using Azure on-demand provisioning. - If shutdown the target VM within the OS, the status will be "Stopped" on Azure Portal. If it is "stopped", it will be subject to Azure pay-as-you-go billing. - If the target VM is from the...

PT-2023-31537 · Woocommerce · Alma

Name of the Vulnerable Software and Affected Versions: Alma – Pay in installments or later for WooCommerce versions through 5.1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This mea...

WordPress Alma – Pay in installments or later for WooCommerce Plugin <= 5.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Alma – Pay in installments or later for WooCommerce Type Plugin Vulnerable versions = 5.2.0 Fixed in 5.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50369 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 820746646333 Credits Ng...

Code injection

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprintCM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01...

CVE-2023-6342 Tyler Technologies Court Case Management Plus "pay for print" allows authentication bypass

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprintCM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01...

CVE-2023-6342 Tyler Technologies Court Case Management Plus "pay for print" allows authentication bypass

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprintCM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01...

PT-2023-32618 · Tyler Technologies · Tyler Technologies Court Case Management Plus

Name of the Vulnerable Software and Affected Versions: Tyler Technologies Court Case Management Plus affected versions not specified Description: The issue allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint...

CVE-2023-47673

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Stefano Ottolenghi Post Pay Counter plugin = 2.784 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Stefano Ottolenghi Post Pay Counter plugin = 2.784 versions...

WordPress Plugin Post Pay Counter Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...