WordPress Sticky banner plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rayhan Ramdhany Hanaputra Patchstack Alliance in WordPress Plugin Sticky banner versions = 1.2.0...

WordPress Sticky banner Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Sticky banner Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35170 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b5e466579051 Credits Rayhan Ramdhany Hanaputra Required...

CVE-2024-34546

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Sticky Social Link sticky-social-link allows DOM-Based XSS.This issue affects Sticky Social Link: from n/a through = 2.0.1...

CVE-2024-34546 WordPress Sticky Social Link plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HabibCoder Sticky Social Link allows Stored XSS.This issue affects Sticky Social Link: from n/a through 1.0.0...

CVE-2024-34546 WordPress Sticky Social Link plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Sticky Social Link sticky-social-link allows DOM-Based XSS.This issue affects Sticky Social Link: from n/a through = 2.0.1...

WordPress plugin Sticky Social Link 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-34546: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Sticky Social Link sticky-social-link allows DOM-Based XSS.This issue affects Sticky Social Link: from n/a through = 2.0.1...

PT-2024-25960 · Unknown · Habibcoder Sticky Social Link

Name of the Vulnerable Software and Affected Versions: HabibCoder Sticky Social Link versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an...

WordPress Sticky Social Link plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by t0y4 in WordPress Plugin Sticky Social Link versions = 2.0.1...

WordPress Sticky Social Link Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Sticky Social Link Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34546 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7d46fd341169 Credits t0y4 Required privilege Administrator...

CVE-2024-34455

Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2...

Buildroot 安全漏洞

Buildroot is Buildroot's open source set of Makefiles and Patch files. It is used to simplify and automate the process of building a complete and bootable Linux environment for embedded systems. A security vulnerability exists in versions prior to Buildroot 0b2967e that stems from missing sticky...

CVE-2024-34455

Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2...

CVE-2024-34455

The Buildroot software (a set of Makefiles and Patch files for building Linux environments) is vulnerable in versions prior to 0b2967e . The root cause is the lack of the sticky bit for the /dev/shm directory, which falls under CWE-276 (Incorrect Default Permissions). This missing permission can ...

CVE-2024-34455: Incorrect Default Permissions

Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2...

PT-2024-25909 · Buildroot · Buildroot

Name of the Vulnerable Software and Affected Versions: Buildroot versions prior to 0b2967e Buildroot version 2024.02.2 and later are not affected, but all versions before 0b2967e are vulnerable. Since 2024.02.2 is the fixed version, we list all versions prior to 0b2967e as vulnerable. Description...

WordPress Sticky Buttons plugin < 3.2.4 - Button Deletion via CSRF vulnerability

Button Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Sticky Buttons versions 3.2.4...

CVE-2024-3475

The Sticky Buttons WordPress plugin before 3.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks...

CVE-2024-3475 Sticky Buttons < 3.2.4 - Button Deletion via CSRF

The Sticky Buttons WordPress plugin before 3.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks...

CVE-2024-3475

The Sticky Buttons WordPress plugin versions prior to 3.2.4 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks in certain bulk actions , which could allow an attacker to trick a logged-in administrator into performing unwanted actions, such as del...