Lucene search
K

57 matches found

NVD
NVD
added 2024/11/09 1:15 p.m.10 views

CVE-2024-51699

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buooy Buooy Sticky Header buooy-sticky-header allows Reflected XSS.This issue affects Buooy Sticky Header: from n/a through = 0.5.2...

7.1CVSS0.00231EPSS
Exploits0References1
CVE
CVE
added 2024/11/09 12:36 p.m.43 views

CVE-2024-51699

CVE-2024-51699 is a reflected XSS in the Buooy Sticky Header WordPress plugin (Improper Neutralization of Input During Web Page Generation). Affected: Buooy Sticky Header versions up to 0.5.2 (and earlier/not explicitly fixed by a public patch in the available documents). Impact is reflected XSS,...

7.1CVSS7.2AI score0.00231EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/09 12:36 p.m.18 views

CVE-2024-51699 WordPress Buooy Sticky Header plugin <= 0.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buooy Buooy Sticky Header buooy-sticky-header allows Reflected XSS.This issue affects Buooy Sticky Header: from n/a through = 0.5.2...

7.1CVSS0.00231EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 12:36 p.m.13 views

CVE-2024-51699 WordPress Buooy Sticky Header plugin <= 0.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buooy Buooy Sticky Header buooy-sticky-header allows Reflected XSS.This issue affects Buooy Sticky Header: from n/a through = 0.5.2...

7.1CVSS7.2AI score0.00231EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.2 views

WordPress plugin Buooy Sticky Header 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.6AI score0.00231EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/04 8:51 a.m.4 views

WordPress Buooy Sticky Header plugin <= 0.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Buooy Sticky Header versions = 0.5.2...

7.1CVSS6.1AI score0.00231EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/04 12:0 a.m.10 views

WordPress Buooy Sticky Header Plugin <= 0.5.2 is vulnerable to Cross Site Scripting (XSS)

Software Buooy Sticky Header Type Plugin Vulnerable versions = 0.5.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51699 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 69b828628d74 Credits João Pedro S Alcântara Kinorth...

7.1CVSS6.9AI score0.00231EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.2 views

PT-2024-21376 · WordPress · My Sticky Bar

Name of the Vulnerable Software and Affected Versions: The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin versions prior to 2.6.8 Description: The issue concerns a Stored Cross-Site Scripting attack that can be performed by...

4.8CVSS4.8AI score0.00253EPSS
Exploits2References6
NVD
NVD
added 2022/12/04 11:15 p.m.8 views

CVE-2022-35730

Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...

6.5CVSS0.00103EPSS
Exploits0References1
OSV
OSV
added 2022/12/04 11:15 p.m.1 views

CVE-2022-35730

Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...

6.5CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2022/12/04 11:15 p.m.9 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...

4.3CVSS6.6AI score0.00103EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/12/04 10:35 p.m.52 views

CVE-2022-35730

CVE-2022-35730 affects the WordPress Oceanwp sticky header plugin: versions ≤ 1.0.8 are without CSRF protections in multiple areas, enabling CSRF-style actions by authenticated users. The vulnerability’s documentation notes remediation by upgrading to a version newer than 1.0.8, though Patchstack...

6.5CVSS5.5AI score0.00103EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/04 10:35 p.m.13 views

CVE-2022-35730 WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...

4.3CVSS6.8AI score0.00103EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/12/04 10:35 p.m.7 views

CVE-2022-35730 WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...

4.3CVSS6.7AI score0.00103EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/12/04 12:0 a.m.2 views

PT-2022-22953 · WordPress · Oceanwp Sticky Header Plugin

Name of the Vulnerable Software and Affected Versions: Oceanwp sticky header plugin version 1.0.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Oceanwp sticky header plugin on WordPress. This issue allows for malicious requests to be made on behalf of the user witho...

6.5CVSS6.4AI score0.00103EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/12/04 12:0 a.m.1 views

WordPress plugin Oceanwp sticky header 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

6.5CVSS6.3AI score0.00103EPSS
Exploits0References2
Patchstack
Patchstack
added 2022/09/27 12:0 a.m.51 views

WordPress Oceanwp sticky header plugin <= 1.0.8 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to a header style change discovered by Rasi Afeef Patchstack Alliance in WordPress Oceanwp sticky header plugin versions = 1.0.8. Solution No patched version is available. No reply from the vendor...

2.6AI score0.00103EPSS
Exploits0Affected Software1
Rows per page
Query Builder