246 matches found
Malicious code in react-redux-v8 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1918 Malicious code in react-redux-v8 (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-23427
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Anderson / Team Updraft Redux Converter redux-converter allows Reflected XSS.This issue affects Redux Converter: from n/a through = 1.1.3.1...
CVE-2024-6828
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the ReduxColorSchemeImport function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can ...
CVE-2025-23427
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Anderson / Team Updraft Redux Converter redux-converter allows Reflected XSS.This issue affects Redux Converter: from n/a through = 1.1.3.1...
CVE-2025-23427 WordPress Redux Converter plugin <= 1.1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Anderson / Team Updraft Redux Converter redux-converter allows Reflected XSS.This issue affects Redux Converter: from n/a through = 1.1.3.1...
CVE-2025-23427
CVE-2025-23427 is a Reflected XSS vulnerability in the WordPress Redux Converter plugin (Redux Converter) affecting versions up to 1.1.3.1. The NVD/Metrics indicate CVSS v3.1: base score 7.1 (HIGH), vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. Connected Red Hat/PTSecurity notes confirm the issue...
PT-2025-4873 · Unknown · Dovy Paukstys Redux Converter
Name of the Vulnerable Software and Affected Versions: Dovy Paukstys Redux Converter versions 1.1.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables attacker...
WordPress plugin Redux Converter 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
WordPress Redux Converter plugin <= 1.1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Redux Converter versions = 1.1.3.1...
MAL-2024-11920 Malicious code in redux-form-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae31362c43d68bb1256c0bfe637e48b0ee30c4bcb18f8768cf7c83153c2beaf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redux-form-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae31362c43d68bb1256c0bfe637e48b0ee30c4bcb18f8768cf7c83153c2beaf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-redux-up (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11431 Malicious code in react-redux-up (npm)
--- -= Per source details. Do not edit below this line.=-...
custom-firepad-toolbar (>=1.0.0 <=1.0.3), devshare (>=0.1.0 <=0.4.0-alpha) +5 more potentially affected by CVE-2024-51210 via firepad (>=1.3.0 <=1.5.11)
firepad NPM version =1.3.0, =1.0.0, =0.1.0, =0.0.50, =0.5.1, =0.9.9 - redux-devshare =0.3.0 Source cves: CVE-2024-51210 Source advisory: OSV:GHSA-4FH7-M2WX-6WFM...
Malicious code in redux-store-immutable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b3c7c3c688154e0e3a57a2a85b1e6f27a506c0a4020c324d3d5120a517cad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10778 Malicious code in redux-store-immutable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b3c7c3c688154e0e3a57a2a85b1e6f27a506c0a4020c324d3d5120a517cad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cms-core-redux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3940178777e39b1b416f9ed8d09fdf519cf9f5a3e2de2361da01655b196991d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10274 Malicious code in cms-core-redux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3940178777e39b1b416f9ed8d09fdf519cf9f5a3e2de2361da01655b196991d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...