Cross-site Scripting in eZFind spellcheck

This security advisory fixes a vulnerability in the legacy eZ Find extension, which can be used with the LegacyBridge in eZ Platform. It affects sites using the "Did you mean...?" spell check / search suggestion feature. This feature is vulnerable to Cross-site Scripting XSS injection reflected...

PT-2024-40221

Name of the Vulnerable Software and Affected Versions: eZ Find extension affected versions not specified Description: The issue affects sites using the "Did you mean...?" spell check / search suggestion feature in the legacy eZ Find extension, which is vulnerable to Cross-site Scripting XSS...

CVE-2024-22143

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.17...

CVE-2024-22143

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.17...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.17...

CVE-2024-22143 WordPress WP Spell Check Plugin <= 9.17 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.17...

CVE-2024-22143

CVE-2024-22143 describes a Cross-Site Request Forgery (CSRF) in the WordPress WP Spell Check plugin affecting versions up to 9.17. The vulnerability is reported as unauthenticated and can impact the plugin’s exposed actions, with CVSS metrics from NVD noting high impact (C/H, I/H, A/H) and overal...

WordPress plugin WP Spell Check Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-19230 · WordPress · Wp Spell Check

Name of the Vulnerable Software and Affected Versions: WP Spell Check versions prior to 9.18 Description: A Cross-Site Request Forgery CSRF issue has been identified. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For versions prior to 9.18, update to...

CVE-2024-22143: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.17...

WP Spell Check < 9.18 - Cross-Site Request Forgery

Description The WP Spell Check plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.17. This is due to missing or incorrect nonce validation on the wpscxadminemptyrender function. This makes it possible for unauthenticated attackers to update an...

WordPress WP Spell Check Plugin <= 9.17 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Spell Check Type Plugin Vulnerable versions = 9.17 Fixed in 9.18 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-22143 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9ea79b610365 Credits Mika Required privileg...

SUSE CVE-2021-30549

Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-2658

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2658

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Cross site scripting

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2658 WP Spell Check < 9.13 - Admin+ Stored Cross-Site Scripting

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2658 WP Spell Check < 9.13 - Admin+ Stored Cross-Site Scripting

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2658

The CVE-2022-2658 entry concerns the WordPress WP Spell Check plugin prior to version 9.13, which does not escape ignored words. This allows Stored Cross-Site Scripting by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (notably in multisite setups). Root cause is imp...

WordPress plugin Spell Check 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...