Air fryer app caught asking for voice data (re-air) (Lock and Code S06E24)

This week on the Lock and Code podcast … It's often said online that if a product is free, you're the product, but what if that bargain was no longer true? What if, depending on the device you paid hard-earned money for, you still became a product yourself, to be measured, anonymized, collated,...

LinkAce cross-site scripting vulnerability (CNVD-2025-27898)

LinkAce is a self-hosted archive of links to your favorite websites. A cross-site scripting vulnerability exists in LinkAce 2.3.1 and prior versions, which stems from insufficient validation of title field input by the social media sharing feature and can be exploited by an attacker to cause a...

EUVD-2024-52543

Malicious code in bioql PyPI...

CVE-2024-54423

Cross-Site Request Forgery CSRF vulnerability in Jesse Overright Social Media Sharing social-media-sharing allows Stored XSS.This issue affects Social Media Sharing: from n/a through = 1.1...

CVE-2024-54423

Cross-Site Request Forgery CSRF vulnerability in Jesse Overright Social Media Sharing social-media-sharing allows Stored XSS.This issue affects Social Media Sharing: from n/a through = 1.1...

CVE-2024-54423

CVE-2024-54423: Cross‑Site Request Forgery (CSRF) in the Social Media Sharing plugin for WordPress can lead to Stored XSS. Public details specify the vulnerable component as Social Media Sharing and indicate exploitation via CSRF to stored XSS, affecting versions up to 1.1. The description in the...

CVE-2024-54423 WordPress Social Media Sharing plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jesse Overright Social Media Sharing social-media-sharing allows Stored XSS.This issue affects Social Media Sharing: from n/a through = 1.1...

WordPress plugin Social Media Sharing 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-36312 · Unknown · Jesse Overright Social Media Sharing

Name of the Vulnerable Software and Affected Versions: Jesse Overright Social Media Sharing versions n/a through 1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a we...

WordPress Social Media Sharing plugin <= 1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Social Media Sharing versions = 1.1...