16598 matches found
unionteamltd.com.hk Cross Site Scripting vulnerability OBB-3800603
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-24034
creationtimestamp| type| source ---|---|--- 2023-12-02 10:56:01+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6045...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gVectors Team wpForo Forum allows Stored XSS.This issue affects wpForo Forum: from n/a through 2.2.3...
CVE-2023-47872 WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gVectors Team wpForo Forum allows Stored XSS.This issue affects wpForo Forum: from n/a through 2.2.3...
CVE-2023-47872
CVE-2023-47872 - wpForo Forum (WordPress plugin) Affected: wpForo Forum plugin for WordPress, versions up to and including 2.2.3.Root cause: Improper Neutralization of Input During Web Page Generation, resulting in a Stored Cross-Site Scripting (XSS) vulnerability. The issue permits stored XSS wi...
CVE-2023-5803
Cross-Site Request Forgery CSRF vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10...
CVE-2023-5803
CVE-2023-5803 affects the WordPress plugin Business Directory Plugin – Easy Listing Directories for WordPress (versions up to 6.3.10). The issue is a Cross-Site Request Forgery (CSRF) due to missing CSRF checks in some locations. Patchstack notes the fix is in version 6.3.11; other sources corrob...
CVE-2023-44150
CVE-2023-44150 affects ProfilePress (Paid Membership Plugin) for WordPress; versions
CVE-2023-40680
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team Yoast Yoast SEO allows Stored XSS.This issue affects Yoast SEO: from n/a through 21.0...
CVE-2023-40680
CVE-2023-40680 describes a stored XSS in WordPress Yoast SEO Plugin
CVE-2023-40680 WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team Yoast Yoast SEO allows Stored XSS.This issue affects Yoast SEO: from n/a through 21.0...
CVE-2023-44150: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login...
CVE-2023-47870: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF, Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Accessing Functionality Not Properly Constrained by ACLs leading to forced all users log out.This issue affects wpForo Forum: from n/a through 2.2.6...
WordPress WordPress Team Members – GS Plugins Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
Software WordPress Team Members – GS Plugins Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 74a732ebddc0 Credits Unknown Requir...
CVE-2023-47816
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin = 1.7.0.13 versions...
CVE-2023-47816
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin = 1.7.0.13 versions...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin = 1.7.0.13 versions...
CVE-2023-47773
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...