WordPress Fixed HTML Toolbar plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Fixed HTML Toolbar versions = 1.0.7...

WordPress Fixed HTML Toolbar Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Fixed HTML Toolbar Type Plugin Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32540 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9a81cddfd865 Credits savphill Required privilege...

CVE-2024-1894

The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bursttotalpageviewscount' custom meta field in all versions up to, and including, 1.5.6.1 due to insufficient input sanitization and output escaping on user...

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10073-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress WordPress Toolbar Plugin <= 2.2.6 is vulnerable to Open Redirection

Software WordPress Toolbar Type Plugin Vulnerable versions = 2.2.6 Fixed in N/A OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2023-6389 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID ae5087bc3d96 Credits Daniel Ruf Required privilege Unauthenticated...

CVE-2023-6389

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

CVE-2023-6389

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

CVE-2023-6389 WordPress Toolbar <= 2.2.6 - Open Redirect

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

CVE-2023-6389 WordPress Toolbar <= 2.2.6 - Open Redirect

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

CVE-2023-6389

CVE-2023-6389 affects WordPress Toolbar plugin up to version 2.2.6, enabling open redirects via the wptbto parameter that can be exploited by unauthenticated attackers to redirect users to arbitrary URLs. The connected Nuclei template notes a fix in version 2.2.7 or later, so upgrading the plugin...

PT-2024-14949 · WordPress · Wordpress Toolbar

Name of the Vulnerable Software and Affected Versions: WordPress Toolbar WordPress plugin versions 2.2.6 and earlier Description: The issue allows unauthenticated attackers to redirect users to potentially malicious sites by tricking them into performing an action. This is achieved via the wptbto...

WordPress plugin WordPress Toolbar security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress Toolbar <= 2.2.6 - Open Redirect

Description The plugin redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. PoC...

WordPress Toolbar <= 2.2.6 - Open Redirect

Description The plugin redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

How to hide desktop viewer toolbar

Instructions on how to hide desktop viewer toolbar...

WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack PoC Make an admin open an HTML page with the following HTML: See that the plugin's "Header Options Toolbar Options Title" has be...

WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Make an admin open an HTML page with the following HTML: document.forms0.submit; See that the plugin's "Header Options Toolbar...

How to customize the toolbar of citrix workspace app for HTML5

How to customize the toolbar of Citrix workspace app for HTML5...

Workspace App toolbar "Devices" option is missing on specific Windows clients

Regarding to same user and VDA, Citrix Workspace App CWA toolbar "Devices" option can show normally on some Windows clients. But on specific Windows clients, "devices" option is missing...

SUSE: Security Advisory (SUSE-SU-2023:2849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...