823 matches found
WordPress Simple HTML Sitemap < 2.9 - Reflected Cross-Site Scripting
Description The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-32574 WordPress WP Simple HTML Sitemap plugin <= 2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Reflected XSS.This issue affects WP Simple HTML Sitemap: from n/a through 2.8...
CVE-2024-32574 WordPress WP Simple HTML Sitemap plugin <= 2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Reflected XSS.This issue affects WP Simple HTML Sitemap: from n/a through 2.8...
CVE-2024-32574
CVE-2024-32574 is a Reflected XSS in the WordPress plugin WP Simple HTML Sitemap, affecting versions <= 2.8. The flaw arises from improper neutralization of input during page generation, enabling attackers to inject scripts via input parameters. The vulnerability is documented as patched in ve...
PT-2024-24695
Name of the Vulnerable Software and Affected Versions Ashish Ajani WP Simple HTML Sitemap versions through 2.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations For...
CVE-2024-32574: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Reflected XSS.This issue affects WP Simple HTML Sitemap: from n/a through 2.8...
WordPress WP Simple HTML Sitemap plugin <= 2.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by CatFather Patchstack Alliance in WordPress Plugin WP Simple HTML Sitemap versions = 2.8...
WordPress WP Simple HTML Sitemap Plugin <= 2.8 is vulnerable to Cross Site Scripting (XSS)
Software WP Simple HTML Sitemap Type Plugin Vulnerable versions = 2.8 Fixed in 2.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2024-32574 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a36645ce9cc9 Credits CatFather Require...
CVE-2024-24311
Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...
CVE-2024-24311
Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...
Path traversal
Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...
CVE-2024-24311
Path Traversal in PrestaShop module lgsitemaps (Multilingual and Multistore Sitemap Pro - SEO) prior to version 1.6.6 allows a guest to download personal information. Affected: PrestaShop with the lgsitemaps module. Root cause: path traversal vulnerability in the module. Impact: unauthorized disc...
CVE-2024-24311
Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...
PT-2024-20353
Name of the Vulnerable Software and Affected Versions Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop versions prior to 1.6.6 Description The issue allows a guest to download personal information without restriction due to a Path Traversal...
CVE-2024-24311
Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...
CVE-2024-24311: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" lgsitemaps module for PrestaShop before version 1.6.6, a guest can download personal information without restriction...
VulnCheck KEV: CVE-2022-0346
The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allowurlinclude is turned on...
VulnCheck KEV: CVE-2022-0952
The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as...