CVE-2024-10874

CVE-2024-10874 (Quotes llama, WordPress) is a Stored XSS vulnerability in the Quotes llama plugin for WordPress, exploitable via the plugin’s shortcodes (quotes-llama). Affected versions are all up to and including 3.0.0. The issue stems from insufficient input sanitization and output escaping on...

CVE-2024-10874 Quotes llama <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Quotes llama plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'quotes-llama' shortcode in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress plugin Quotes llama 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

WordPress Blizzard Quotes Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Blizzard Quotes Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53729 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ed471ac7b5ce Credits SOPROBRO Required...

CVE-2024-10874: Improper Neutralization of Input During Web Page Generation

The Quotes llama plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'quotes-llama' shortcode in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress Quotes llama plugin <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Quotes llama versions = 3.0.0...

PT-2024-16607 · WordPress · Quotes Llama

Name of the Vulnerable Software and Affected Versions: Quotes llama plugin for WordPress versions up to, and including, 3.0.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'quotes-llama' shortcode due to insufficient input sanitization and output escaping on...

WordPress Quotes llama Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Quotes llama Type Plugin Vulnerable versions = 3.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10874 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f9b6d2f50cd Credits Peter Thaleikis Required...

Malicious code in js-rust-grpc-quotes (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9676 Malicious code in js-rust-grpc-quotes (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of the Setup/Deployment component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Setup/Deployment component of the Windows operating system is related to the absence of quotation marks in the syntax of certain elements or search paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

AZL-47860 CVE-2024-7592 affecting package python3 for versions less than 3.9.19-4

There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resourc...

The vulnerability of the Mint Workbench controller management software lies in the absence of quotation marks in the code for elements or search paths, allowing attackers to exploit their privileges.

The vulnerability of the Mint Workbench controller management software is related to the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability can allow an attacker to increase their privileges by sending a specially created file...

CVE-2024-42029: Improper Neutralization of Special Elements used in an OS Command

xdg-desktop-portal-hyprland aka an XDG Desktop Portal backend for Hyprland before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment...

WordPress Quotes and Tips plugin < 1.45 - Admin+ Arbitrary File Upload vulnerability

Admin+ Arbitrary File Upload vulnerability discovered by Peng Zhou zpbrent in WordPress Plugin Quotes And Tips versions 1.45...

CVE-2024-3112

The CVE-2024-3112 entry concerns the Quotes and Tips by BestWebSoft WordPress plugin (pre-1.45). The vulnerability arises from improper validation of uploaded image files, enabling high-privilege users (e.g., administrators) to upload arbitrary files to the server, including in multisite configur...

CVE-2024-3112 Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...

CVE-2024-3112 Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...

WordPress plugin Quotes and Tips by BestWebSoft Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability previously existed in the...

CVE-2024-3112: Unrestricted Upload of File with Dangerous Type

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...