CVE-2023-32497

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Supersoju Block Referer Spam plugin = 1.1.9.4 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Supersoju Block Referer Spam plugin = 1.1.9.4 versions...

CVE-2023-32497

CVE-2023-32497 is a Stored XSS vulnerability in the WordPress plugin Block Referer Spam (Supersoju) that affects versions

CVE-2023-32497 WordPress Block Referer Spam Plugin <= 1.1.9.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Supersoju Block Referer Spam plugin = 1.1.9.4 versions...

PT-2023-23831 · WordPress · Supersoju Block Referer Spam

Name of the Vulnerable Software and Affected Versions: Supersoju Block Referer Spam plugin versions 1.1.9.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the Supersoj...

WordPress plugin Block Referer Spam has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-32497: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Supersoju Block Referer Spam plugin = 1.1.9.4 versions...

URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header

Description The plugin does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link. 1. Add a new shortened link in the interface...

URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header

Description The plugin does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link. PoC 1. Add a new shortened link in the interface...

Siemens SCALANCE X-200RNA Switch Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2022-46355)

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. The affected products are...

SAP Enable Now Referrer Policy

The vulnerability of the Referrer Policy component in SAP Enable Now, which is used for creating and managing training materials, is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and disclose...

CVE-2021-36580

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...

CVE-2021-36580

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...

CVE-2021-36580

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...

Open redirect

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...

CVE-2021-36580

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...

CVE-2021-36580: URL Redirection to Untrusted Site

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...

PT-2023-12292 · Icewarp · Icewarp Mail Server

Name of the Vulnerable Software and Affected Versions: IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 version 13.0.1.2 Description: The issue is related to an Open Redirect vulnerability. It exists via the referer parameter. Recommendations: For IceWarp MailServer IceWarp Server Deep...

IceWarp Mail Server has a vulnerability related to input validation errors.

IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration, and more. A security vulnerability exists in IceWarp Mail Server that stems from an open redirection vulnerability via the refer...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2023-62628)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...