3520 matches found
CVE-2023-34577
SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary SQL commands via OpartPlannedPopupModuleFrontController::prepareHook method...
PrestaShop SQL Injection Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop opartplannedpopup 1.4.11 and earlier versions, which originated fro...
D-Link Di-7200G Buffer Error Vulnerability
The D-Link Di-7200G is a Gigabit enterprise router from China's AUO D-Link. A security vulnerability exists in the D-Link Di-7200G, which can be caused by manipulating the popupId parameter in the H5/hiblock.asp function to cause a stack overflow...
wp tell a friend popup form <= 7.1 - Admin+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-25465
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy wp tell a friend popup form plugin = 7.1 versions...
CVE-2023-25465
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy wp tell a friend popup form plugin = 7.1 versions...
CVE-2023-25465 WordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy wp tell a friend popup form plugin = 7.1 versions...
WordPress plugin wp-tell-a-friend-popup-form cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Popup box Plugin < 3.7.2 is vulnerable to Cross Site Scripting (XSS)
Software Popup box Type Plugin Vulnerable versions 3.7.2 Fixed in 3.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 52bb8b9ef075 Credits Unknown Required privilege Administrator...
CVE-2023-34174
Unauth. Reflected Cross-Site Scripting XSS vulnerability in BBS e-Theme BBS e-Popup plugin = 2.4.5 versions...
CVE-2023-34174
Unauth. Reflected Cross-Site Scripting XSS vulnerability in BBS e-Theme BBS e-Popup plugin = 2.4.5 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in BBS e-Theme BBS e-Popup plugin = 2.4.5 versions...
CVE-2023-34174
CVE-2023-34174: Unauthenticated Reflected XSS in WordPress plugin BBS e-Popup (BBS e-Theme)
CVE-2023-34174 WordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in BBS e-Theme BBS e-Popup plugin = 2.4.5 versions...
PT-2023-24712 · Unknown · Bbs E-Popup
Name of the Vulnerable Software and Affected Versions: BBS e-Theme BBS e-Popup plugin versions = 2.4.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...
Popup Builder < 4.2.0 - Admin+ Stored Cross-Site Scripting
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. Note: The vendor was made aware of th...
WordPress plugin bbs-e-popup 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Popup Builder < 4.2.0 - Admin+ Stored Cross-Site Scripting
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. Note: The vendor was made aware of th...