6783 matches found
CVE-2022-40692 WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WP Sunshine Sunshine Photo Cart plugin = 2.9.13 versions...
CVE-2022-40692
CVE-2022-40692 – WP Sunshine Sunshine Photo Cart : A CSRF vulnerability affects plugin versions ≤ 2.9.13. The reported impact per sources includes high risk in CVSS terms (NVD: 8.8) with potential impact to confidentiality, integrity, and availability; other assessments cite moderate to high impa...
WordPress Plugin Sunshine Photo Cart 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2023-13891 · WordPress · Wp Sunshine Sunshine Photo Cart
Name of the Vulnerable Software and Affected Versions: WP Sunshine Sunshine Photo Cart plugin versions 2.9.13 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection
Software Simple Photo Gallery Type Plugin Vulnerable versions = v1.8.1 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-47588 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID 7bcaa9fe7073 Credits minhtuanact Required privilege Administrator...
January 26, 2023—KB5022360 (OS Build 22621.1194) Preview
None None...
VulnCheck KEV: CVE-2021-24139
Unvalidated input in the Photo Gallery 10Web Photo Gallery WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwgsearchx parameter...
WordPress Lightbox Photo Gallery Plugin < 0.9.5 is vulnerable to Cross Site Scripting (XSS)
Software Lightbox Photo Gallery Type Plugin Vulnerable versions 0.9.5 Fixed in 0.9.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4682 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 26f255866ba8 Credits Lana Codes...
CVE-2022-4301
The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
CVE-2022-4301
The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
Cross site scripting
The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
CVE-2022-4301 Sunshine Photo Cart < 2.9.15 - Reflected XSS
The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
CVE-2022-4301 Sunshine Photo Cart < 2.9.15 - Reflected XSS
The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
CVE-2022-4301
CVE-2022-4301 affects the Sunshine Photo Cart WordPress plugin prior to 2.9.15. The vulnerability is a reflected cross-site scripting flaw caused by failing to sanitize and escape a parameter before it is output on the page. The issue is documented in multiple sources (NVD/Nuclei template, RH Red...
WordPress Plugin Sunshine Photo Cart 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2023-7911 · WordPress · Sunshine Photo Cart
Name of the Vulnerable Software and Affected Versions: Sunshine Photo Cart WordPress plugin versions prior to 2.9.15 Description: The issue is related to the Sunshine Photo Cart WordPress plugin, which does not properly sanitise and escape a parameter before outputting it back in the page. This...
WordPress Photo Gallery Plugin < 1.8.3 XSS Vulnerability
The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
CVE-2022-4058
The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control...
Cross site scripting
The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control...
CVE-2022-4058 Photo Gallery < 1.8.3 - Stored XSS via CSRF
The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control...