60 matches found
WordPress plugin Pootle Pagebuilder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...
PT-2024-25989 · WordPress · Pootle Pagebuilder
Name of the Vulnerable Software and Affected Versions: Pootle Pagebuilder – WordPress Page builder versions through 5.7.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
CVE-2024-34573: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pootlepress Pootle Pagebuilder – WordPress Page builder allows Stored XSS.This issue affects Pootle Pagebuilder – WordPress Page builder: from n/a through 5.7.1...
WordPress Pootle Pagebuilder plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Pootle Pagebuilder – WordPress Page builder versions = 5.7.1...
WordPress Pootle Pagebuilder – WordPress Page builder Plugin <= 5.7.1 is vulnerable to Cross Site Scripting (XSS)
Software Pootle Pagebuilder – WordPress Page builder Type Plugin Vulnerable versions = 5.7.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34573 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a5f35e271817 Credits savphill...
WordPress Pootle Pagebuilder – WordPress Page builder Plugin <= 5.7.1 is vulnerable to Cross Site Scripting (XSS)
Software Pootle Pagebuilder – WordPress Page builder Type Plugin Vulnerable versions = 5.7.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bfe0292b9dab Credits Rafie...
WordPress Pootle Pagebuilder – WordPress Page builder plugin <= 5.7.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Pootle Pagebuilder – WordPress Page builder plugin versions = 5.7.0. Solution Update the WordPress Pootle Pagebuilder – WordPress Page builder plugin to the latest available version at least 5.7.1...
WordPress Pootle Pagebuilder – WordPress Page builder plugin <= 5.7.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pootle Pagebuilder – WordPress Page builder plugin versions = 5.7.0. Solution Update the WordPress Pootle Pagebuilder – WordPress Page builder plugin to the latest available version at least 5.7.1...
Pootle Cross-Site Scripting Vulnerability
Pootle is an online translation management tool. A cross-site scripting vulnerability exists in version 2.0.5-0.2 of pootle, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-side code...
CVE-2010-4245
pootle 2.0.5 has XSS via 'matchnames' parameter...
Design/Logic Flaw
pootle 2.0.5 has XSS via 'matchnames' parameter...
CVE-2010-4245
pootle 2.0.5 has XSS via 'matchnames' parameter...
CVE-2010-4245
pootle 2.0.5 has XSS via 'matchnames' parameter...
CVE-2010-4245
CVE-2010-4245 affects pootle 2.0.5 with cross-site scripting via the 'match_names' parameter. Multiple connected sources (including Red Hat, Ubuntu, CNVD, NVD mirrors) confirm an XSS vulnerability in version 2.0.5, but none of the provided documents include explicit exploit details, exploitation ...
PT-2019-6586
Name of the Vulnerable Software and Affected Versions pootle versions 2.0.5 through 2.0.5-0.2 Description The issue is related to a Cross-Site Scripting XSS problem. It is caused by the match names parameter. There is no information provided about the estimated number of potentially affected...
CVE-2010-4245: Improper Neutralization of Input During Web Page Generation
pootle 2.0.5 has XSS via 'matchnames' parameter...
WordPress Pootle Button Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Pootle Button plugin is one of the Pootle button plugin. A cross-site scripting vulnerability exists in WordPress...
Design/Logic Flaw
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...
