3712 matches found
CVE-2022-44739: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin = 1.5.4 versions...
vacavillequicklane.com Cross Site Scripting vulnerability OBB-3355540
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Quick Page/Post Redirect Plugin <= 5.2.3 is vulnerable to Cross Site Scripting (XSS)
Software Quick Page/Post Redirect Type Plugin Vulnerable versions = 5.2.3 Fixed in 5.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25063 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 28b05154c93f Credits Justiice...
CVE-2023-31497
Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...
Improper access control
Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...
CVE-2023-31497
Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...
EUVD-2023-35802
Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...
CVE-2023-31497
CVE-2023-31497 affects Seqrite Endpoint Security (EPS) from Quick Heal Technologies Limited, with all versions prior to 8.0 vulnerable to local privilege escalation to root via a crafted binary. The Red Hat/NVD/PT reports confirm a root-priority impact (privilege escalation) through incorrect acc...
quick-cool.de Cross Site Scripting vulnerability OBB-3290873
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dyn-libs (>=0.2.1, <=0.2.2), quick-mock (>=0.0.2, <=0.0.3) +2 more potentially affected by CVE-2023-30861 via flask (1.0.0)
flask PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - dyn-libs =0.2.1, =0.0.2, =2.2.2.1, =2.3.1.0 - sevenpack 2.7.1 Source cves: CVE-2023-30861 Source advisory: OSV:PYSEC-2023-62...
CVE-2023-1554
The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-1554
The CVE concerns the Quick Paypal Payments WordPress plugin. Affected: Quick Paypal Payments plugin for WordPress (prior to version 5.7.26.4). Issue: insufficient sanitisation/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., administrators) even when unfiltered_htm...
CVE-2023-1554 Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS
The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
PT-2023-17070 · WordPress · Quick Paypal Payments
Name of the Vulnerable Software and Affected Versions: Quick Paypal Payments WordPress plugin versions prior to 5.7.26.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is...
WordPress plugin Quick Paypal Payments 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...
CVE-2023-1554: Improper Neutralization of Input During Web Page Generation
The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
dyn-libs (>=0.2.1, <=0.2.2), quick-mock (>=0.0.2, <=0.0.3) +2 more potentially affected by CVE-2023-30861 via flask (1.0.0)
flask PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - dyn-libs =0.2.1, =0.0.2, =2.2.2.1, =2.3.1.0 - sevenpack 2.7.1 Source cves: CVE-2023-30861 Source advisory: OSV:GHSA-M2QF-HXJV-5GPQ...
CVE-2023-23889
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...
