CVE-2023-41235

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...

CVE-2023-41237 WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...

CVE-2023-41237 WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...

CVE-2023-41237

CVE-2023-41237 stems from an unauthenticated, reflected Cross-Site Scripting (XSS) in the WordPress theme Everest Themes’ Arya Multipurpose Pro, versioned ≤ 1.0.8. Public writeups consistently describe it as an unauthenticated XSS issue, with the impact limited to data integrity and user interact...

CVE-2023-41236 WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...

CVE-2023-41236

CVE-2023-41236 affects Happy Elementor Addons Pro (WordPress) up to version 2.8.0, exposing unauthenticated reflected XSS. Patchstack assigns CVSS v3.1 vectors and basescore 7.1 (HIGH) with network access and user interaction required. Affected product: Happy Elementor Addons Pro; vulnerability t...

CVE-2023-41235

CVE-2023-41235: Everest News Pro theme (WordPress) up to version 1.1.7 is vulnerable to unauthenticated reflected XSS. Root cause: improper handling of user-controlled input in the Everest News Pro theme, enabling reflected XSS payloads. Impact is stated as cross-site scripting with unauthenticat...

CVE-2023-41235 WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...

CVE-2023-41235 WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...

WordPress plugin Everest News Pro cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-27858 · Unknown · Everest News Pro

Name of the Vulnerable Software and Affected Versions: Everest News Pro theme versions 1.1.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for the execution of malicious scripts on the client-side, potential...

PT-2023-27860 · Everest Themes · Arya Multipurpose Pro

Name of the Vulnerable Software and Affected Versions: Everest Themes Arya Multipurpose Pro theme versions 1.0.8 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts...

Hive Pro Partners with Tech Titan to Fortify Cybersecurity Landscape in Southeast Asia

HERNDON, VA., Sept. 26, 2023 - Hive Pro®, a pioneer vendor in Threat Exposure Management, is thrilled to announce a strategic partnership with Tech Titan Group, a leading IT Solutions Provider renowned for its innovation-driven approach and dedication to addressing evolving customer needs across...

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

Apple Security Update: iOS 17.0.2 and iPadOS 17.0.2

Apple recommends to install security update iOS 17.0.2 and iPadOS 17.0.2 on devices iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th...

CVE-2023-43291

CVE-2023-43291 describes a deserialization of untrusted data vulnerability in the emlog pro. v2.1.15 and earlier, exploitable via the cache.php component to achieve remote code execution. Multiple connected sources (Red Hat, CNVD, CNNVD, OSV, NVD, CVE listing) consistently cite deserialization of...

PT-2023-28762 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.1.15 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the cache.php component due to deserialization of untrusted data. Recommendations: For emlog pro versions 2.1.15 and earlier, ...