CVE-2024-37267

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in kaptinlin Striking allows Reflected XSS.This issue affects Striking: from n/a through 2.3.4...

CVE-2024-37267

CVE-2024-37267 concerns the WordPress Striking theme (

CVE-2024-37267 WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in kaptinlin Striking allows Reflected XSS.This issue affects Striking: from n/a through 2.3.4...

CVE-2024-37267 WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in kaptinlin Striking allows Reflected XSS.This issue affects Striking: from n/a through 2.3.4...

PT-2024-27432 · Striking · Striking

Name of the Vulnerable Software and Affected Versions: Striking versions n/a through 2.3.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions n/a...

CVE-2024-37268

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in kaptinlin Striking allows Path Traversal.This issue affects Striking: from n/a through 2.3.4...

CVE-2024-37268

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in kaptinlin Striking allows Path Traversal.This issue affects Striking: from n/a through 2.3.4...

CVE-2024-37268 WordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in kaptinlin Striking allows Path Traversal.This issue affects Striking: from n/a through 2.3.4...

CVE-2024-37268 WordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in kaptinlin Striking allows Path Traversal.This issue affects Striking: from n/a through 2.3.4...

CVE-2024-37268

CVE-2024-37268 is a Path Traversal (Local File Inclusion) vulnerability in kaptinlin Striking WordPress theme/plugin, affecting Striking versions up to 2.3.4. Root cause: improper limitation of a pathname to a restricted directory. Impact: potential access to restricted files as described in conn...

PT-2024-27433 · Kaptinlin · Striking

Name of the Vulnerable Software and Affected Versions: Striking versions n/a through 2.3.4 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, in kaptinlin Striking. This vulnerability allows Path...

WordPress plugin Striking path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Striking versions = 2.3.4...

WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Striking versions = 2.3.4...

WordPress Striking Theme <= 2.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Striking Type Theme Vulnerable versions = 2.3.4 Fixed in 2.3.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37267 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2195a58a6bf5 Credits Rafie Muhammad Patchstack Required...

WordPress Striking Theme <= 2.3.4 is vulnerable to Local File Inclusion

Software Striking Type Theme Vulnerable versions = 2.3.4 Fixed in 2.3.5 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-37268 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 3bf80a88872b Credits Rafie Muhammad Patchstack Required privilege...

Multiple Slider Plugins for WordPress 'img' Parameter Local File Inclusion Vulnerability

A Slider plugin for WordPress hosted on the remote web server is affected by a local file inclusion vulnerability due to a failure to properly sanitize user-supplied input to the 'img' parameter of the 'imageview.class.php' script. This allows an unauthenticated, remote attacker to read arbitrary...

XSS and FPD vulnerabilities in ZeroClipboard in multiple themes for WordPress

Hello 3APA3A! These are Cross-Site Scripting and Full path disclosure vulnerabilities in multiple themes for WordPress with ZeroClipboard.swf. Earlier I've wrote about Cross-Site Scripting vulnerabilities in ZeroClipboard http://seclists.org/fulldisclosure/2013/Feb/103. I wrote that this is very...

Wordpress striking theme Full Path Disclosure vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...