io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.3.26.final), io.undertow:undertow-websockets-jsr (1.3.26.final) +9 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.3.26.final)

io.undertow:undertow-core MAVEN version 1.3.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.26.final - io.undertow:undertow-websockets-jsr 1.3.26.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

CVE-2024-43263

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Starter allows Stored XSS.This issue affects Visual Composer Starter: from n/a through 3.3...

CVE-2024-43263

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Starter allows Stored XSS.This issue affects Visual Composer Starter: from n/a through 3.3...

CVE-2024-43263 WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Starter allows Stored XSS.This issue affects Visual Composer Starter: from n/a through 3.3...

CVE-2024-43263

Technical details about CVE-2024-43263 are not provided in the supplied Connected documents. Public sources in Initial document describe Stored XSS in Visual Composer Starter version up to 3.3, but no concrete exploit specifics, mitigations, or affected product/version beyond that.

PT-2024-30426 · Unknown · Visual Composer Starter

Name of the Vulnerable Software and Affected Versions: Visual Composer Starter versions through 3.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

WordPress plugin Visual Composer Starter has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-43263: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Starter allows Stored XSS.This issue affects Visual Composer Starter: from n/a through 3.3...

org.nutz:nutzboot-starter-xxl-job-executor (>=2.1.0, <=2.5.1.v20220215) potentially affected by CVE-2024-42681 via com.xuxueli:xxl-job-core (1.9.0)

com.xuxueli:xxl-job-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - org.nutz:nutzboot-starter-xxl-job-executor =2.1.0, =2.5.1.v20220215 Source cves: CVE-2024-42681 Source advisory...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release) potentially affected by CVE-2024-42681 via com.xuxueli:xxl-job-core (1.8.2)

com.xuxueli:xxl-job-core MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release Source cves: CVE-2024-42681 Source advisory:...

WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Visual Composer Starter versions = 3.3...

WordPress Visual Composer Starter Theme <= 3.3 is vulnerable to Cross Site Scripting (XSS)

Software Visual Composer Starter Type Theme Vulnerable versions = 3.3 Fixed in 3.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43263 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ce7f81ff359f Credits stealthcopter Required privilege...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci-fig-template (>=1.0.1, <=1.0.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.1.1) +6 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.518)

org.jenkins-ci.main:jenkins-core MAVEN version 1.518 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-fig-template =1.0.1, =1.0.0, =1.1, =1.2 -...

com.github.xiaoyuge5201:common-spring-boot-starter (1.1), org.redisson:redisson-tomcat (2.11.5) +3 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.11.5)

org.redisson:redisson MAVEN version 2.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.xiaoyuge5201:common-spring-boot-starter 1.1 - org.redisson:redisson-tomcat 2.11.5 -...

org.redisson:redisson-spring-boot-starter (2.13.1), org.redisson:redisson-spring-data (2.13.1) +9 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.13.1)

org.redisson:redisson MAVEN version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-spring-boot-starter 2.13.1 - org.redisson:redisson-spring-data 2.13.1 -...

cn.guomw.cloud:framework-cloud-starter-auth (>=1.0.0.release, <=1.1.0.1.btxc.release), cn.guomw.cloud:framework-cloud-starter-dlock (>=1.0.0.release, <=1.1.0.1.btxc.release) +5 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.10.0)

org.redisson:redisson MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - cn.guomw.cloud:framework-cloud-starter-auth =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.1.0.release -...

org.redisson:redisson-spring-boot-starter (2.14.1), org.redisson:redisson-spring-data (2.14.1) +9 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.14.1)

org.redisson:redisson MAVEN version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-spring-boot-starter 2.14.1 - org.redisson:redisson-spring-data 2.14.1 -...