246 matches found
CVE-2023-30751
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...
CVE-2023-30751 WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...
CVE-2023-30751 WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in iControlWP Article Directory Redux plugin = 1.0.2 versions...
CVE-2023-30751
CVE-2023-30751 affects the WordPress plugin Article Directory Redux (iControlWP Article Directory Redux) versions ≤ 1.0.2. It is described as an Authenticated Stored XSS vulnerability that an administrator can exploit via the plugin’s input handling. Impact is characterized as low for confidentia...
PT-2023-22954 · WordPress · Icontrolwp Article Directory Redux
Name of the Vulnerable Software and Affected Versions: iControlWP Article Directory Redux plugin versions 1.0.2 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scrip...
WordPress plugin article-directory-redux cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Article Directory Redux Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30751 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1d10759d477b Credits Pavitra Tiwari...
Malicious code in cms-ui-redux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b762909fe644f0cec406dc5042d82e4b93fda0f4259313f2884b3cf4ed92cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-195 Malicious code in cms-ui-redux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b762909fe644f0cec406dc5042d82e4b93fda0f4259313f2884b3cf4ed92cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview cms-ui-redux is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Malicious Package
Overview tools-access-react-redux is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
acari-lib (>=0.1.11 <=0.1.12), acme-rs (>=0.1.0 <=0.2.0) +350 more potentially affected by unknown CVE via buf_redux (>=0.1.3 <=0.8.4)
bufredux CARGO version =0.1.3, =0.1.11, =0.1.0, =0.9.2, =0.5.1, =0.2.0, =0.1.0, =0.0.1, =0.1.5, =0.0.5, =0.0.1, =0.1.0, =1.0.0, =0.26.1, =0.26.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0028...
buf_redux is Unmaintained
Last release was over three years ago. The maintainers have been unreachable to respond to any issues that may or may not include security issues. The repository is now archived and there is no security policy in place to contact the maintainers otherwise. The safety-undocumented unsafe in the...
RUSTSEC-2023-0028 buf_redux is Unmaintained
Last release was over three years ago. The maintainers have been unreachable to respond to any issues that may or may not include security issues. The repository is now archived and there is no security policy in place to contact the maintainers otherwise. The safety-undocumented unsafe in the...
Malicious code in react-redux-7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1317918bed3a26481cc0f2581c7902fde3cb69f75efdf9ab9f4fc365d5abf451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-redux-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 923626e0b4bdb65be6f322ccc7a88eb917c23f0c7e1a122ae4f8723b0b2959f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5669 Malicious code in react-redux-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 923626e0b4bdb65be6f322ccc7a88eb917c23f0c7e1a122ae4f8723b0b2959f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5670 Malicious code in react-redux-7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1317918bed3a26481cc0f2581c7902fde3cb69f75efdf9ab9f4fc365d5abf451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redux-cations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75da2b1d6ce3300bfe7396bf882c7fd061003df2bde7ca6b90287a17b1d7ebfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in -redux-forjm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b71391377ccc1bbe5686068baa4134a5f2133e0cf8b132f8df7ad66ee4dd64ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...