EUVD-2023-56202

Malicious code in bioql PyPI...

CVE-2024-43338: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Automattic Crowdsignal Dashboard – Polls, Surveys & more polldaddy allows Cross Site Request Forgery.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through = 3.1.3...

WordPress plugin Crowdsignal Dashboard – Polls, Surveys & more 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Crowdsignal Dashboard - Polls, Surveys & more A...

CVE-2024-7134: Improper Neutralization of Input During Web Page Generation

The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘formdata’ parameter in all versions up to, and including, 3.3.78 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-2080: Exposure of Sensitive Information to an Unauthorized Actor

The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.76 via the pollerlist shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to...

CVE-2023-51489: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.0.11...

PT-2024-14148 · Unknown · Crowdsignal Dashboard

Name of the Vulnerable Software and Affected Versions: Crowdsignal Dashboard – Polls, Surveys & more versions 3.0.11 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Crowdsignal Dashboard, allowing unauthorized actions to be performed on behalf of a user without their...

CVE-2023-51488: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more allows Reflected XSS.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.0.11...

PT-2024-14147 · Unknown · Crowdsignal Dashboard – Polls

Name of the Vulnerable Software and Affected Versions: Crowdsignal Dashboard – Polls, Surveys & more versions n/a through 3.0.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS...