74 matches found
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin = 1.2.102 versions...
CVE-2023-46076
CVE-2023-46076 is an unauthenticated reflected XSS in the WooCommerce PDF Invoice Builder plugin for WordPress, affecting versions up to 1.2.102. The vulnerability stems from improper input handling in the plugin, enabling injection of scripts via user-controlled input. Unpatched in 1.2.102, expl...
CVE-2023-46076 WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.102 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin = 1.2.102 versions...
PT-2023-29828 · WordPress · Rednao Woocommerce Pdf Invoice Builder
Name of the Vulnerable Software and Affected Versions: RedNao WooCommerce PDF Invoice Builder plugin versions 1.2.102 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website,...
CVE-2023-40664
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao Donations Made Easy – Smart Donations plugin = 4.0.12 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao Donations Made Easy – Smart Donations plugin = 4.0.12 versions...
CVE-2023-40664
The CVE-2023-40664 entry concerns an unauthenticated reflected XSS in the WordPress plugin Donations Made Easy – Smart Donations, affected versions
CVE-2023-40664 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao Donations Made Easy – Smart Donations plugin = 4.0.12 versions...
PT-2023-27585 · WordPress · Rednao Donations Made Easy – Smart Donations
Name of the Vulnerable Software and Affected Versions: RedNao Donations Made Easy – Smart Donations plugin versions = 4.0.12 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...
CVE-2023-32603
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao Donations Made Easy – Smart Donations plugin = 4.0.12 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao Donations Made Easy – Smart Donations plugin = 4.0.12 versions...
CVE-2023-32603
CVE-2023-32603 is an unauthenticated reflected XSS in WordPress plugin Donations Made Easy – Smart Donations, affected versions and = 4.0.13+ or equivalent) or monitor for an official fix.
PT-2023-23906 · WordPress · Rednao Donations Made Easy – Smart Donations
Name of the Vulnerable Software and Affected Versions: RedNao Donations Made Easy – Smart Donations plugin versions = 4.0.12 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites, potentiall...
JVN#97656108: WordPress plugin "Smart Forms" vulnerable to cross-site request forgery
The WordPress plugin "Smart Forms" provided by RedNao contains a cross-site request forgery vulnerability CWE-352. Impact Unintended operations may be performed if a user logs into the WordPress administration screen and browses a malicious page. Those operations may include generating new forms,...