Lucene search
+L

651 matches found

NVD
NVD
added 2024/02/07 9:15 a.m.20 views

CVE-2024-24311

Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...

7.5CVSS7.5AI score0.00666EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/07 9:15 a.m.16 views

Path traversal

Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...

5CVSS6.9AI score0.00666EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/07 12:00 a.m.27 views

CVE-2024-24311

Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...

7.7AI score0.00666EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/07 12:00 a.m.11 views

CVE-2024-24311

Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...

6.7AI score0.00666EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/07 12:00 a.m.69 views

CVE-2024-24311

Path Traversal in PrestaShop module lgsitemaps (Multilingual and Multistore Sitemap Pro - SEO) prior to version 1.6.6 allows a guest to download personal information. Affected: PrestaShop with the lgsitemaps module. Root cause: path traversal vulnerability in the module. Impact: unauthorized disc...

7.5CVSS7.4AI score0.00666EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/01/02 12:00 a.m.11 views

VulnCheck KEV: CVE-2022-0346

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allowurlinclude is turned on...

6.1CVSS6.5AI score0.02397EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
added 2024/01/02 12:00 a.m.5 views

VulnCheck KEV: CVE-2022-0952

The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such...

8.8CVSS7.4AI score0.11419EPSS
SaveExploits2References1
NVD
NVD
added 2023/12/17 10:15 a.m.24 views

CVE-2023-24380

Cross-Site Request Forgery CSRF vulnerability in Webbjocke Simple Wp Sitemap.This issue affects Simple Wp Sitemap: from n/a through 1.2.1...

8.8CVSS0.00306EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/17 10:15 a.m.6 views

CVE-2023-24380

Cross-Site Request Forgery CSRF vulnerability in Webbjocke Simple Wp Sitemap.This issue affects Simple Wp Sitemap: from n/a through 1.2.1...

8.8CVSS7.3AI score0.00306EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/17 10:15 a.m.28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Webbjocke Simple Wp Sitemap.This issue affects Simple Wp Sitemap: from n/a through 1.2.1...

6.8CVSS7.2AI score0.00306EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/17 9:46 a.m.36 views

CVE-2023-24380 WordPress Simple Wp Sitemap Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Webbjocke Simple Wp Sitemap.This issue affects Simple Wp Sitemap: from n/a through 1.2.1...

4.3CVSS8.9AI score0.00306EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/17 9:46 a.m.43 views

CVE-2023-24380

CVE-2023-24380 is a CSRF vulnerability in the Simple Wp Sitemap WordPress plugin, affecting versions

8.8CVSS8.5AI score0.00306EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/17 12:00 a.m.8 views

WordPress Plugin Simple Wp Sitemap Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00306EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/12/07 12:00 a.m.13 views

WordPress WP Simple HTML Sitemap Plugin <= 2.7 is vulnerable to Broken Access Control

Software WP Simple HTML Sitemap Type Plugin Vulnerable versions = 2.7 Fixed in 2.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-49850 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9b56242682af Credits Abdi Pranata Required...

6.5AI score0.00371EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/18 11:15 p.m.13 views

CVE-2023-31089

Cross-Site Request Forgery CSRF vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0...

8.8CVSS7.3AI score0.00327EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/18 11:15 p.m.29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0...

6.8CVSS7.2AI score0.00327EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/18 10:38 p.m.83 views

CVE-2023-31089

CVE-2023-31089 concerns the WordPress plugin Video XML Sitemap Generator (Tradebooster)

8.8CVSS8.5AI score0.00327EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/18 10:38 p.m.32 views

CVE-2023-31089 WordPress Video XML Sitemap Generator Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0...

4.3CVSS8.9AI score0.00327EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/18 12:00 a.m.11 views

WordPress Plugin Video XML Sitemap Generator Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.4AI score0.00327EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/18 12:00 a.m.13 views

PT-2023-23145 · Unknown · Tradebooster Video Xml Sitemap Generator

Name of the Vulnerable Software and Affected Versions: Tradebooster Video XML Sitemap Generator versions 1.0.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

8.8CVSS8.8AI score0.00327EPSS
SaveExploits0References4
Rows per page
Query Builder