32 matches found
CVE-2023-30875
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in All My Web Needs Logo Scheduler plugin = 1.2.0 versions...
CVE-2025-32599 WordPress Task Scheduler Plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in miunosoft Task Scheduler allows Reflected XSS. This issue affects Task Scheduler: from n/a through 1.6.3...
CVE-2023-30875
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in All My Web Needs Logo Scheduler plugin = 1.2.0 versions...
CVE-2023-30875
The CVE CVE-2023-30875 affects the WordPress plugin Logo Scheduler (All My Web Needs) up to version 1.2.0. It is a stored cross-site scripting vulnerability exploitable by authenticated administrators (admin+) and was fixed in version 1.2.2. The issue’s existence and fix are corroborated by Patch...
CVE-2023-30875 WordPress Logo Scheduler Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in All My Web Needs Logo Scheduler plugin = 1.2.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...
CVE-2022-38079
CVE-2022-38079 concerns a Cross-Site Request Forgery (CSRF) in the WordPress Backup Scheduler plugin, versioned
WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability discovered by Lana Codes in WordPress Backup Scheduler plugin versions = 1.5.13. Solution Deactivate and delete. This plugin has been closed as of September 19, 2022 and is not available for download. This closure is temporary, pending a full review...
Atlassian Jira 跨站脚本漏洞
Atlassian Jira is a defect tracking management system from Atlassian Australia. The Atlassian Jira Transition Scheduler plugin version 6.5.0 contains a cross-site scripting vulnerability, which stems from the fact that it is easy to store XSS to the creation function via the project name. An...
CVE-2020-13426
The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery CSRF vulnerability in the forms it presents, allowing the possibility of deleting records users when an ID is known...
Cross site request forgery (csrf)
The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery CSRF vulnerability in the forms it presents, allowing the possibility of deleting records users when an ID is known...
CVE-2020-13426
CVE-2020-13426 affects WordPress with the Multi Scheduler plugin v1.0.0. The vulnerability is a Cross‑Site Request Forgery in the plugin’s forms, allowing an attacker to delete records (users) when a target ID is known. The root cause is CSRF protection failure in the plugin’s request handling. P...