PT-2024-25989 · WordPress · Pootle Pagebuilder

Name of the Vulnerable Software and Affected Versions: Pootle Pagebuilder – WordPress Page builder versions through 5.7.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

WordPress Pootle Pagebuilder plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Pootle Pagebuilder – WordPress Page builder versions = 5.7.1...

WordPress Pootle Pagebuilder – WordPress Page builder Plugin <= 5.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Pootle Pagebuilder – WordPress Page builder Type Plugin Vulnerable versions = 5.7.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34573 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a5f35e271817 Credits savphill...

WordPress Pootle Pagebuilder – WordPress Page builder Plugin <= 5.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Pootle Pagebuilder – WordPress Page builder Type Plugin Vulnerable versions = 5.7.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bfe0292b9dab Credits Rafie...

WordPress Pootle Pagebuilder – WordPress Page builder plugin <= 5.7.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pootle Pagebuilder – WordPress Page builder plugin versions = 5.7.0. Solution Update the WordPress Pootle Pagebuilder – WordPress Page builder plugin to the latest available version at least 5.7.1...

WordPress Pootle Pagebuilder – WordPress Page builder plugin <= 5.7.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pootle Pagebuilder – WordPress Page builder plugin versions = 5.7.0. Solution Update the WordPress Pootle Pagebuilder – WordPress Page builder plugin to the latest available version at least 5.7.1...

Pootle Cross-Site Scripting Vulnerability

Pootle is an online translation management tool. A cross-site scripting vulnerability exists in version 2.0.5-0.2 of pootle, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-side code...

CVE-2010-4245

pootle 2.0.5 has XSS via 'matchnames' parameter...

Design/Logic Flaw

pootle 2.0.5 has XSS via 'matchnames' parameter...

CVE-2010-4245

pootle 2.0.5 has XSS via 'matchnames' parameter...

CVE-2010-4245

CVE-2010-4245 affects pootle 2.0.5 with cross-site scripting via the 'match_names' parameter. Multiple connected sources (including Red Hat, Ubuntu, CNVD, NVD mirrors) confirm an XSS vulnerability in version 2.0.5, but none of the provided documents include explicit exploit details, exploitation ...

CVE-2010-4245

pootle 2.0.5 has XSS via 'matchnames' parameter...

WordPress Pootle Button Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Pootle Button plugin is one of the Pootle button plugin. A cross-site scripting vulnerability exists in WordPress...

CVE-2017-15811

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

CVE-2017-15811

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

Design/Logic Flaw

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

CVE-2017-15811

The CVE-2017-15811 entry concerns the Pootle Button plugin for WordPress, affecting versions before 1.2.0 with a Cross-Site Scripting (XSS) flaw. The vulnerability is triggered by the assets_url parameter in assets/dialog.php and is exploitable via wp-admin/admin-ajax.php, allowing an attacker to...

CVE-2017-15811

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

WordPress Pootle button plugin <=1.1.1 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found in WordPress Pootle button plugin versions =1.1.1. Solution Update the WordPress Pootle button plugin to the latest available version at least version 1.2.0...

pootle button <= 1.1.1 - Authenticated Cross-Site Scripting (XSS)

The pootle button WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. http://example.com/wp-admin/admin-ajax.php?action=pbtndialog&assetsurl=%22%3E%3Cimg%20src=x%20onerror=alert1%3E...