CVE-2023-41508

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

CVE-2023-41507

CVE-2023-41507 affects Super Store Finder v3.6 and earlier, with multiple SQL injection vulnerabilities in the store locator component exposed via the products, distance, lat, and lng parameters. The root cause is improper input handling in the store locator queries, enabling attacker-controlled ...

CVE-2023-41508

CVE-2023-41508 affects Super Store Finder v3.6, where a hard-coded password in the Google Maps API integration enables an attacker to access the administration panel. The linked Red Hat/CNNVD/etc. entries corroborate the hard-coded credential issue and attribute it to v3.6. The PT-2023-4915 advis...

CVE-2023-41507: Improper Neutralization of Special Elements used in an SQL Command

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters...

CVE-2023-41507

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters...

CVE-2023-41508

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

SySS TEF portal code issue vulnerability

SySS TEF portal is an online store system from SySS Germany. A security vulnerability exists in SySS TEF portal version 2023-07-17, which stems from a remote code execution vulnerability...

Super Store Finder Trust Management Issue Vulnerability

Super Store Finder is an easy to use Google Maps API store finder program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v3.6 that stems from the use of hard-coded passwords...

Super Store Finder SQL Injection Vulnerability

Super Store Finder is an easy-to-use Google Maps API store locator program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v3.6, which stems from an SQL injection vulnerability in the store locator component that contains multiple SQL...

CVE-2023-41508: Use of Hard-coded Credentials

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

indianstoreperth.com.au Cross Site Scripting vulnerability OBB-3646348

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-4151

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-4151

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Cross site scripting

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-2813 Multiple Themes - Reflected XSS

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2,...

CVE-2023-4151 Store Locator WordPress < 1.4.13 - Reflected XSS

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-4151 Store Locator WordPress < 1.4.13 - Reflected XSS

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-4151

CVE-2023-4151 affects the Store Locator WordPress plugin for versions before 1.4.13. The issue is that an invalid nonce is not properly sanitised/escaped before being echoed back in an AJAX response, causing a reflected Cross-Site Scripting vulnerability. Impact is described as enabling this XSS ...

PT-2023-4915 · Unknown · Super Store Finder

Name of the Vulnerable Software and Affected Versions: Super Store Finder version 3.6 Description: The issue is related to the use of hardcoded credentials in the Super Store Finder Google Maps API integration, allowing a remote attacker to gain access to the administration panel. A hardcoded...

PT-2023-4916 · Unknown · Super Store Finder

Name of the Vulnerable Software and Affected Versions: Super Store Finder version 3.6 Description: The issue is related to a lack of protection against SQL query structure exploitation, which can allow a remote attacker to gain access to the administration panel. The store locator component is...