CVE-2023-32588 WordPress Post State Tags Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BRANDbrilliance Post State Tags plugin = 2.0.6 versions...

CVE-2023-32588

CVE-2023-32588 is a CSRF vulnerability in BRANDbrilliance Post State Tags plugin (

CVE-2023-46618 WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...

CVE-2023-46618

CVE-2023-46618 is a CSRF vulnerability affecting WordPress Category SEO Meta Tags plugin versions

WordPress Plugin post-state-tags security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-30115 · WordPress · Category Seo Meta Tags

Name of the Vulnerable Software and Affected Versions: Category SEO Meta Tags plugin versions = 2.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-23892 · Unknown · Brandbrilliance Post State Tags

Name of the Vulnerable Software and Affected Versions: BRANDbrilliance Post State Tags plugin versions 2.0.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

CVE-2023-34024

Cross-Site Request Forgery CSRF vulnerability in Guillemant David WP Full Auto Tags Manager plugin = 2.2 versions...

CVE-2023-34024

A vulnerability in northswitch WP Full Auto Tags Manager wp-full-auto-tags-manager.This issue affects WP Full Auto Tags Manager: from n/a through = 2.2...

CVE-2023-34024

CVE-2023-34024 concerns the WordPress plugin Guillemant David WP Full Auto Tags Manager, affected versions 2.2 if feasible, and monitor for a vendor patch or official mitigation. No exploitation details are provided in the documents.

CVE-2023-34024 WordPress WP Full Auto Tags Manager Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Guillemant David WP Full Auto Tags Manager plugin = 2.2 versions...

CVE-2023-34024 WordPress WP Full Auto Tags Manager plugin <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

A vulnerability in northswitch WP Full Auto Tags Manager wp-full-auto-tags-manager.This issue affects WP Full Auto Tags Manager: from n/a through = 2.2...

WordPress Plugin wp-full-auto-tags-manager Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access

Description The plugin leaks password-protected post content to unauthenticated visitors in some meta tags PoC As unauthenticated, view the source of any password-protected post and see that the content of the post is disclosed in the og:description and twitter:description meta tags...

CVE-2023-1715

A logic error when using mbstrpos to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload...

Cross site scripting

A logic error when using mbstrpos to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload...

CVE-2023-1715 Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)

A logic error when using mbstrpos to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload...

CVE-2023-1715 Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)

A logic error when using mbstrpos to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload...

PT-2023-6693 · Bitrix +1 · Bitrix24 +1

Name of the Vulnerable Software and Affected Versions: Bitrix24 version 22.0.300 Description: A logic error in the mb strpos function allows attackers to bypass XSS sanitization by placing HTML tags at the beginning of the payload, potentially leading to a cross-site scripting XSS attack. This...

golang: html/template: improper handling of special tags within script contexts

A flaw was found in Golang. The html/template package did not apply the proper rules for handling occurrences of " contexts. This issue may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped...