1492 matches found
PT-2023-26219 · Woocommerce · Product Stock Manager & Notifier For Woocommerce
Name of the Vulnerable Software and Affected Versions: Product Stock Manager & Notifier for WooCommerce versions through 2.0.1 Description: The issue is related to Exposure of Sensitive Information to an Unauthorized Actor, affecting the Product Stock Manager & Notifier for WooCommerce...
free-stock-music.com Cross Site Scripting vulnerability OBB-3785386
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-48198
A Cross-Site Scripting XSS vulnerability in the 'product description' component within '/api/stock/products' of Grocy version = 4.0.3 allows attackers to obtain a victim's cookies...
Grocy Cross-Site Scripting Vulnerability
Grocy is a web-based self-hosted grocery and home management solution from Grocy Open Source. A cross-site scripting vulnerability exists in Grocy version v.4.0.3, which stems from a cross-site scripting XSS vulnerability in the product description component of the api/stock/products endpoint. An...
PT-2023-30723 · Grocy · Grocy
Name of the Vulnerable Software and Affected Versions: Grocy versions = 4.0.3 Description: A Cross-Site Scripting XSS issue exists in the 'product description' component within the "/api/stock/products" endpoint, allowing attackers to obtain a victim's cookies. This issue can be exploited by a...
CVE-2023-48198
A Cross-Site Scripting XSS vulnerability in the 'product description' component within '/api/stock/products' of Grocy version = 4.0.3 allows attackers to obtain a victim's cookies...
CVE-2022-36277
The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks...
TCMAN GIM Cross-Site Scripting Vulnerability
TCMAN GIM is a CMMS from TCMAN, Inc. that can be used in a variety of areas: industrial, facilities, healthcare, fleet and maintenance services. A cross-site scripting vulnerability exists in TCMAN GIM version v8.0.1, which stems from the sReferencia, sDescription, txtCodigo, and txtDeripcion...
PT-2023-13469 · Tcman Gim · Tcman Gim
Name of the Vulnerable Software and Affected Versions: TCMAN GIM version 8.0.1 Description: The issue concerns the sReferencia, sDescripcion, txtCodigo, and txtDescripcion parameters in the "frmGestionStock.aspx" and "frmEditServicio.aspx" files, which could allow an attacker to perform persisten...
CVE-2023-43727
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockindicationtext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-41666
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Stockdio Stock Quotes List plugin = 2.9.9 versions...
CVE-2023-41666
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Stockdio Stock Quotes List plugin = 2.9.9 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Stockdio Stock Quotes List plugin = 2.9.9 versions...
CVE-2023-41666 WordPress Stock Quotes List Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Stockdio Stock Quotes List plugin = 2.9.9 versions...
CVE-2023-41666
CVE-2023-41666 corresponds to a Stored XSS in the WordPress plugin Stock Quotes List. Connected sources indicate affected versions include Stock Quotes List <= 2.9.11 (Patchstack) with a fix in 2.9.12; the initial description also references versions
CVE-2023-41666 WordPress Stock Quotes List Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Stockdio Stock Quotes List plugin = 2.9.9 versions...
WordPress Plugin Stock Quotes List Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-41666: Improper Neutralization of Input During Web Page Generation
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Stockdio Stock Quotes List plugin = 2.9.9 versions...
PT-2023-28036 · WordPress · Stockdio Stock Quotes List
Name of the Vulnerable Software and Affected Versions: Stockdio Stock Quotes List plugin versions = 2.9.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Stockdio Stock Quotes List plugin. This vulnerability requires authentication and is...