CVE-2022-42880

Cross-Site Request Forgery CSRF vulnerability in Ali Irani Auto Upload Images plugin = 3.3 versions allows Stored Cross-Site Scripting XSS...

CVE-2022-42880 WordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ali Irani Auto Upload Images plugin = 3.3 versions allows Stored Cross-Site Scripting XSS...

PT-2023-23379 · Unknown · Ckeditor Plugin For Redmine

Name of the Vulnerable Software and Affected Versions: CKEditor plugin for Redmine version 1.2.3 Description: A vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor plugin for Redmine, allowing arbitrary files to be uploaded to the server. This issue affects the...

PT-2023-14156

Name of the Vulnerable Software and Affected Versions Ali Irani Auto Upload Images plugin versions = 3.3 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored Cross-Site Scripting XSS. Recommendations For Ali Irani Auto Upload Images plugin...

CVE-2022-42880: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ali Irani Auto Upload Images plugin = 3.3 versions allows Stored Cross-Site Scripting XSS...

CVE-2023-31541: Unrestricted Upload of File with Dangerous Type

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...

WordPress Plugin Ali Irani Auto Upload Images 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2022-4632

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...

CVE-2022-4633

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

CVE-2022-4632

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...

CVE-2022-4633

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

Cross site scripting

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...

Cross site request forgery (csrf)

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

Auto Upload Images 跨站脚本漏洞

Auto Upload Images is designed to automatically detect external images in post content and import the images into your site and add them to the media library. A cross-site scripting vulnerability exists in Auto Upload Images version 3.3.1, which stems from its unknown function that allows an...

CVE-2022-4633: Cross-Site Request Forgery (CSRF)

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

CVE-2022-4633

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

CVE-2022-4632

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...

PT-2022-27822 · Unknown · Auto Upload Images

Name of the Vulnerable Software and Affected Versions: Auto Upload Images versions up to 3.3.0 Description: A vulnerability was found in the file src/setting-page.php of the component Settings Handler, leading to cross-site request forgery. The attack may be launched remotely. Recommendations: Fo...

CVE-2022-4633

CVE-2022-4633 affects Auto Upload Images up to version 3.3.0. The vulnerability resides in the file src/setting-page.php of the Settings Handler, enabling cross-site request forgery (CSRF). The attack may be launched remotely. A fix is available in version 3.3.1; apply the upgrade (patch identifi...

CVE-2022-4632 Auto Upload Images cross site scripting

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...