3521 matches found
mozilla: SelectElements could be shown over another site if popups are allowed
The Mozilla Foundation's Security Advisory: If a site had been granted permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack...
mozilla: SelectElements could be shown over another site if popups are allowed
The Mozilla Foundation's Security Advisory: If a site had been granted permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack...
CVE-2024-5799
The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks...
PT-2024-7130 · Tp Link · Tp-Link Wr740N
Name of the Vulnerable Software and Affected Versions: TP-Link WR740N version V6 Description: The issue is related to a stack overflow vulnerability. It can be exploited via the ssid parameter in the "/userRpm/popupSiteSurveyRpm.htm" URL, potentially allowing an attacker to execute arbitrary code...
WordPress Popup Maker plugin < 1.19.1 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Popup Maker versions 1.19.1...
CVE-2024-5561 Popup Maker < 1.19.1 - Admin+ Stored XSS
The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-5561 Popup Maker < 1.19.1 - Admin+ Stored XSS
The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-5561 Popup Maker < 1.19.1 - Admin+ Stored XSS
The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-5561
CVE-2024-5561 affects the Popup Maker WordPress plugin (pre-1.19.1). The issue arises because the plugin does not sanitize and escape certain settings, enabling stored XSS by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (such as in multisite). Red Hat and OSV entri...
WordPress plugin Popup Maker 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Popup Maker Plugin < 1.19.1 is vulnerable to Cross Site Scripting (XSS)
Software Popup Maker Type Plugin Vulnerable versions 1.19.1 Fixed in 1.19.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5561 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 28c13e8e0eab Credits Dmitrii Ignatyev Required...
CVE-2024-6855 WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack...
CVE-2024-6853 WP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRF
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such action via a CSRF attack...
CVE-2024-6853 WP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRF
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such action via a CSRF attack...
PT-2024-36565 · WordPress · Popup Maker
Name of the Vulnerable Software and Affected Versions: The Popup Maker WordPress plugin versions prior to 1.19.1 Description: The issue concerns a Stored Cross-Site Scripting flaw in the Popup Maker WordPress plugin. This flaw arises because the plugin does not properly sanitize and escape some o...
WordPress plugin WP MultiTasking 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress plugin WP MultiTasking 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-37906 · WordPress · Wp Multitasking
Name of the Vulnerable Software and Affected Versions: WP MultiTasking WordPress plugin versions 0.1.12 and earlier Description: The issue is related to a lack of CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such actions via a CSRF attack...
SUSE-SU-2024:3157-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 128.2.0 ESR bsc1229821 - CVE-2024-8381: Type confusion when looking up a property name in a 'with' block - CVE-2024-8382: Internal event interfaces were exposed to web content when browser...
