57 matches found
CVE-2024-51699
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buooy Buooy Sticky Header buooy-sticky-header allows Reflected XSS.This issue affects Buooy Sticky Header: from n/a through = 0.5.2...
CVE-2024-51699
CVE-2024-51699 is a reflected XSS in the Buooy Sticky Header WordPress plugin (Improper Neutralization of Input During Web Page Generation). Affected: Buooy Sticky Header versions up to 0.5.2 (and earlier/not explicitly fixed by a public patch in the available documents). Impact is reflected XSS,...
CVE-2024-51699 WordPress Buooy Sticky Header plugin <= 0.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buooy Buooy Sticky Header buooy-sticky-header allows Reflected XSS.This issue affects Buooy Sticky Header: from n/a through = 0.5.2...
CVE-2024-51699 WordPress Buooy Sticky Header plugin <= 0.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buooy Buooy Sticky Header buooy-sticky-header allows Reflected XSS.This issue affects Buooy Sticky Header: from n/a through = 0.5.2...
WordPress plugin Buooy Sticky Header 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress Buooy Sticky Header plugin <= 0.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Buooy Sticky Header versions = 0.5.2...
WordPress Buooy Sticky Header Plugin <= 0.5.2 is vulnerable to Cross Site Scripting (XSS)
Software Buooy Sticky Header Type Plugin Vulnerable versions = 0.5.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51699 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 69b828628d74 Credits João Pedro S Alcântara Kinorth...
PT-2024-21376 · WordPress · My Sticky Bar
Name of the Vulnerable Software and Affected Versions: The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin versions prior to 2.6.8 Description: The issue concerns a Stored Cross-Site Scripting attack that can be performed by...
CVE-2022-35730
Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...
CVE-2022-35730
Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...
CVE-2022-35730
CVE-2022-35730 affects the WordPress Oceanwp sticky header plugin: versions ≤ 1.0.8 are without CSRF protections in multiple areas, enabling CSRF-style actions by authenticated users. The vulnerability’s documentation notes remediation by upgrading to a version newer than 1.0.8, though Patchstack...
CVE-2022-35730 WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...
CVE-2022-35730 WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Oceanwp sticky header plugin = 1.0.8 on WordPress...
PT-2022-22953 · WordPress · Oceanwp Sticky Header Plugin
Name of the Vulnerable Software and Affected Versions: Oceanwp sticky header plugin version 1.0.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Oceanwp sticky header plugin on WordPress. This issue allows for malicious requests to be made on behalf of the user witho...
WordPress plugin Oceanwp sticky header 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
WordPress Oceanwp sticky header plugin <= 1.0.8 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to a header style change discovered by Rasi Afeef Patchstack Alliance in WordPress Oceanwp sticky header plugin versions = 1.0.8. Solution No patched version is available. No reply from the vendor...