WordPress PropertyHive Plugin <= 1.5.52 is vulnerable to Cross Site Scripting (XSS)

Software PropertyHive Type Plugin Vulnerable versions = 1.5.52 Fixed in 1.5.53 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-22706 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b9faa8c10632 Credits Nguyen Xuan Chien...

CVE-2023-29172

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PropertyHive plugin = 1.5.46 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PropertyHive plugin = 1.5.46 versions...

CVE-2023-29172 WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PropertyHive plugin = 1.5.46 versions...

CVE-2023-29172

CVE-2023-29172 affects the WordPress PropertyHive plugin (versions ≤ 1.5.46). It describes unauthenticated Reflected XSS via the merge_ids parameter. Public reports (NVD, Red Hat/Wordfence, Patchstack) confirm the vulnerability and note that a fix exists in version 1.5.47. The impact is cross-sit...

CVE-2023-29172 WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PropertyHive plugin = 1.5.46 versions...

WordPress plugin PropertyHive 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS)

Software PropertyHive Type Plugin Vulnerable versions = 1.5.46 Fixed in 1.5.47 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29172 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1f09421dbd25 Credits minhtuanact Requir...

WordPress PropertyHive plugin <= 1.4.25 - Unvalidated Input to do_action()

Unvalidated Input to doaction vulnerability found in WordPress PropertyHive plugin versions = 1.4.25. Solution 2018 December 7 - This plugin was closed on November 30, 2018 and is no longer available for download...

PropertyHive <= 1.4.25 - Unvalidated Input to do_action()

According to the plugin's changelog: "Corrected potential vulnerability picked up by WordPress causing plugin to be removed from plugin repository."...

WordPress PropertyHive plugin <=1.4.14 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress PropertyHive plugin versions =1.4.14. Cross-Site Scripting possible via the body parameter "includes/admin/views/html-preview-applicant-matches-email.php". Solution Update the WordPress PropertyHive plugin to the latest available version a...

WordPress PropertyHive plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up personal blog site . PropertyHive plugin is used in one of the management platform plugin . A cross-site scripting vulnerability exists...

WordPress Propertyhive 1.4.14 Cross Site Scripting Vulnerability

WordPress Propertyhive plugin version 1.4.14 suffers from a cross site scripting vulnerability. WordPress Propertyhive 1.4.14 Cross Site Scripting Vulnerability Vulnerable Propertyhive 1.4.14 Propertyhive is prone to a stored cross-site scripting vulnerability because it fails to sufficiently...

Hardcoded credentials

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465

PropertyHive WordPress plugin versions ≤1.4.14 are affected by a Cross-Site Scripting (XSS) vulnerability in the body parameter of includes/admin/views/html-preview-applicant-matches-email.php. Root cause: improper handling of the body parameter leads to script execution in the context of a victi...

PropertyHive <= 1.4.14 - Cross-Site Scripting (XSS)

The PropertyHive WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Propertyhive 1.4.14 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Propertyhive 1.4.14 Propertyhive is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...