1380 matches found
Cross site scripting
The MS-Reviews WordPress plugin through 1.5 does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks...
CVE-2023-0424 MS-Reviews <= 1.5 - Subscriber+ Stored XSS
The MS-Reviews WordPress plugin through 1.5 does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks...
CVE-2023-0424 MS-Reviews <= 1.5 - Subscriber+ Stored XSS
The MS-Reviews WordPress plugin through 1.5 does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks...
CVE-2023-0424
CVE-2023-0424 affects the MS-Reviews WordPress plugin,
WordPress plugin MS-Reviews 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2023-16262 · WordPress · Ms-Reviews
Name of the Vulnerable Software and Affected Versions: MS-Reviews WordPress plugin versions 1.5 and earlier Description: The issue allows authenticated users, such as Subscribers, to perform Stored Cross-Site Scripting attacks due to the lack of sanitization and escaping of reviews...
What your peers said: G2 comparison of top Endpoint Security vendors
Navigating the world of endpoint security is challenging, with numerous vendors stoking FUD and making bold claims that are difficult to verify. In times like these, the honest opinions of real users are invaluable for busy IT teams. Enter G2, an industry-leading peer-to-peer review site. Each...
WordPress Verified Reviews (Avis Vérifiés) Plugin <= 2.3.14 is vulnerable to Cross Site Scripting (XSS)
Software Verified Reviews Avis Vérifiés Type Plugin Vulnerable versions = 2.3.14 Fixed in 2.3.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23720 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 4bfd6109ebaa Credits yuyudh...
Verified Reviews < 2.3.15 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Widgets for Google Reviews Plugin for WordPress < 9.8 Cross-Site Scripting
The WordPress Widgets for Google Reviews Plugin installed on the remote host is affected by a cross-site scripting vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
WordPress Stamped.io Product Reviews & UGC for WooCommerce Plugin <= 2.3.2 is vulnerable to Broken Access Control
Software Stamped.io Product Reviews & UGC for WooCommerce Type Plugin Vulnerable versions = 2.3.2 Fixed in 2.3.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30479 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 085ffb9fd6fa...
WordPress MS-Reviews Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)
Software MS-Reviews Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0424 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 3c9df93ac5de Credits Rio Darmawan Required privilege...
MS-Reviews <= 1.5 - Subscriber+ Stored XSS
The plugin does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks PoC As a subscriber, submit a review a page/post with msreviews embed with the following payload: The XSS will be triggered when...
MS-Reviews <= 1.5 - Subscriber+ Stored XSS
The plugin does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks As a subscriber, submit a review a page/post with msreviews embed with the following payload: alert/XSS/ The XSS will be triggered...
A Hacker’s Mind News
My latest book continues to sell well. Its ranking hovers between 1,500 and 2,000 on Amazon. Its been spied in airports. Reviews are consistently good. I have been enjoying giving podcast interviews. It all feels pretty good right now. You can order a signed book from me here. For those of you in...
WordPress Wiremo – Product Reviews for WooCommerce Plugin <= 1.4.96 is vulnerable to Cross Site Request Forgery (CSRF)
Software Wiremo – Product Reviews for WooCommerce Type Plugin Vulnerable versions = 1.4.96 Fixed in 1.4.97 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2d39700f9e9f...
CVE-2022-44580
SQL Injection SQLi vulnerability in RichPlugins Plugin for Google Reviews plugin = 2.2.3 versions...
CVE-2022-44580
SQL Injection SQLi vulnerability in RichPlugins Plugin for Google Reviews plugin = 2.2.3 versions...