5632 matches found
Wordpress plugin Yooslider Yoo Slider 跨站请求伪造漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in Wordpress plugin Yooslider Yoo Slider 2.0.0 and earlier, which can be exploited by attackers ...
PT-2022-18636
Name of the Vulnerable Software and Affected Versions Yoo Slider versions prior to 2.0.1 Description A Cross-Site Request Forgery CSRF issue exists, allowing attackers to import templates. Recommendations For Yoo Slider versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issu...
PT-2022-18635
Name of the Vulnerable Software and Affected Versions Yooslider Yoo Slider versions 2.0.0 and earlier Description A Cross-Site Request Forgery CSRF issue allows attackers to create or modify sliders. Recommendations For versions 2.0.0 and earlier, update to a version later than 2.0.0 to resolve t...
CVE-2022-27846
Cross-Site Request Forgery CSRF vulnerability in Yooslider Yoo Slider = 2.0.0 on WordPress allows attackers to create or modify slider...
WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Slider Creation / Modification
Cross-Site Request Forgery CSRF vulnerability leading to Slider Creation / Modification discovered by Ex.Mi Patchstack in WordPress Yoo Slider plugin versions = 2.0.0. Solution Update the WordPress Yoo Slider plugin to the latest available version at least 2.1.0...
Yoo Slider < 2.1.0 - Arbitrary Slider Creation/Edition via CSRF
The plugin does not have CSRF check in place when creating and editing sliders, which could allow attackers to make a logged in admin create and edit arbitrary slider via a CSRF attack...
WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Import
Cross-Site Request Forgery CSRF vulnerability leading to Template Import discovered by Ex.Mi Patchstack in WordPress Yoo Slider plugin versions = 2.0.0. Solution Update the WordPress Yoo Slider plugin to the latest available version at least 2.1.0...
WordPress Free Testimonials Slider plugin跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Free Testimonials Slider plugin has a...
CVE-2021-36851
Authenticated editor or higher user role Cross-Site Scripting XSS vulnerability in Web-Settler Testimonial Slider – Free Testimonials Slider Plugin WordPress plugin via parameters mpsppostsbgcolor, mpsppostsdescriptioncolor, mpspslidenavbuttoncolor...
CVE-2021-36851
The CVE-2021-36851 entry affects the WordPress plugin “Testimonial Slider” (Free Testimonials Slider Plugin) and is due to insufficient sanitization of color-related parameters (mpsp_posts_bg_color, mpsp_posts_description_color, mpsp_slide_nav_button_color). This authenticated-XSS vulnerability r...
CVE-2021-36851 WordPress Testimonial Slider plugin <= 3.5.8.3 - Cross-Site Scripting (XSS) vulnerability
Authenticated editor or higher user role Cross-Site Scripting XSS vulnerability in Web-Settler Testimonial Slider – Free Testimonials Slider Plugin WordPress plugin via parameters mpsppostsbgcolor, mpsppostsdescriptioncolor, mpspslidenavbuttoncolor...
Testimonial Slider <= 3.5.8.3 - Contributor+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its slider settings, such as mpsppostsbgcolor, mpsppostsdescriptioncolor, mpspslidenavbuttoncolor which could allow users with the editpost capability contributor and above to perform Cross-Site Scripting attacks...
CVE-2021-36851: Improper Neutralization of Input During Web Page Generation
Authenticated editor or higher user role Cross-Site Scripting XSS vulnerability in Web-Settler Testimonial Slider – Free Testimonials Slider Plugin WordPress plugin via parameters mpsppostsbgcolor, mpsppostsdescriptioncolor, mpspslidenavbuttoncolor...
PT-2022-10577
Name of the Vulnerable Software and Affected Versions Web-Settler Testimonial Slider – Free Testimonials Slider Plugin affected versions not specified Description The issue is related to an Authenticated Cross-Site Scripting XSS vulnerability. It can be exploited via parameters mpsp posts bg colo...
WordPress plugin Free Testimonials Slider Plugin 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Free Testimonials Slider plugin has a...
WordPress Testimonial Slider plugin <= 3.5.8.4 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability was discovered by Ngo Van Thien Patchstack Alliance in the WordPress Testimonial Slider plugin versions = 3.5.8.4. Solution Update the WordPress Testimonial Slider plugin to the latest available version at least 3.5.8.5...
Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting Vulnerability
Exploit Title: Drupal avataruploader v7.x-1.0-beta8 - Cross Site Scripting XSS Author: Milad karimi Software Link: https://www.drupal.org/project/avataruploader Version: v7.x-1.0-beta8 Tested on: Windows 10 CVE: N/A 1. Description: This plugin creates a avataruploader from any post types. The...
Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS)
Exploit Title: Drupal avataruploader v7.x-1.0-beta8 - Cross Site Scripting XSS Date: 2022-03-22 Author: Milad karimi Software Link: https://www.drupal.org/project/avataruploader Version: v7.x-1.0-beta8 Tested on: Windows 10 CVE: N/A 1. Description: This plugin creates a avataruploader from any po...
WordPress Yoo Slider plugin cross-site request forgery vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Yoo Slider plugin 2.0.0 and previous versions...