1492 matches found
CVE-2023-40208
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Urošević Stock Ticker plugin = 3.23.3 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Uroševi? Stock Ticker plugin = 3.23.3 versions...
CVE-2023-40208 WordPress Stock Ticker Plugin <= 3.23.3 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Urošević Stock Ticker plugin = 3.23.3 versions...
CVE-2023-40208
CVE-2023-40208 concerns the WordPress Stock Ticker plugin. Connected sources describe a Reflected Cross-Site Scripting (XSS) vulnerability in the ajax_stockticker_load function for versions up to and including 3.23.3, caused by insufficient input sanitization and output escaping. Exploitation is ...
CVE-2023-40208 WordPress Stock Ticker Plugin <= 3.23.3 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Urošević Stock Ticker plugin = 3.23.3 versions...
WordPress plugin Stock Ticker Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2023-27326 · Unknown · Aleksandar Urošević Stock Ticker
Name of the Vulnerable Software and Affected Versions: Aleksandar Urošević Stock Ticker plugin versions = 3.23.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a...
CVE-2023-40208: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aleksandar Urošević Stock Ticker plugin = 3.23.3 versions...
WordPress Stock Quotes List Plugin <= 2.9.11 is vulnerable to Cross Site Scripting (XSS)
Software Stock Quotes List Type Plugin Vulnerable versions = 2.9.11 Fixed in 2.9.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41666 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8915def85604 Credits deokhunKim Required...
CVE-2023-31094
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin = 2.4.0 versions...
CVE-2023-31094
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin = 2.4.0 versions...
CVE-2023-31094
CVE-2023-31094: unauthenticated reflected XSS in Stock Sync for WooCommerce (WordPress plugin) versions <= 2.4.0. Root cause: vulnerability in input handling that allows injection of script via page parameter, leading to potential cookie/session data exposure or defacement as described in mult...
Stock Sync for WooCommerce < 2.4.1 - Reflected XSS
Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-31094: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin = 2.4.0 versions...
WordPress plugin Stock Sync for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2023-30871
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...
CVE-2023-30871
CVE-2023-30871 affects the WordPress plugin Stock Exporter for WooCommerce by PT Woo Plugins (by Webdados). On versions = 1.2.0. If upgrading immediately is not possible, apply vendor-supplied mitigations/patches where available and ensure input/output handling adheres to secure coding practices....
CVE-2023-30871 WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...
CVE-2023-30871: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...
PT-2023-23026
Name of the Vulnerable Software and Affected Versions PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin versions 1.1.0 and earlier Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...