nautobot has reflected Cross-site Scripting potential in all object list views

Impact It was discovered that due to improper handling and escaping of user-provided query parameters, a maliciously crafted Nautobot URL could potentially be used to execute a Reflected Cross-Site Scripting Reflected XSS attack against users. All filterable object-list views in Nautobot are...

PT-2024-25026

Name of the Vulnerable Software and Affected Versions Nautobot versions prior to 1.6.20 Nautobot versions prior to 2.2.3 Description A Reflected Cross-Site Scripting Reflected XSS attack can be executed against users due to improper handling and escaping of user-provided query parameters in...

CVE-2024-3929

The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More Gutenberg Blocks and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Widget Post Overlay block in all versions up to, and including, 3.7.0 due to insufficient input sanitization and...

CVE-2024-3929

Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) for WordPress is vulnerable to Stored XSS via the Widget Post Overlay block in all versions up to and including 3.7.0. An authenticated attacker with contributor-level access can inject scrip...

CVE-2024-3929 Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlay

The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More Gutenberg Blocks and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Widget Post Overlay block in all versions up to, and including, 3.7.0 due to insufficient input sanitization and...

WordPress Content Views plugin <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlay vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Widget Post Overlay vulnerability discovered by wesley wcraft in WordPress Plugin Content Views versions = 3.7.0...

PT-2024-28422 · WordPress · Content Views – Post Grid & Filter

Name of the Vulnerable Software and Affected Versions: The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More plugin for WordPress versions up to, and including, 3.7.0 Description: The issue is related to Stored Cross-Site Scripting via the Widget Post Overlay block due to...

WordPress Content Views Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Content Views Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3929 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0486765092e3 Credits wesley wcraft Required...

WordPress plugin Content Views 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More < 3.7.1 - Contributor+ Stored Cross-Site Scripting via Widget Post Overlay

Description The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More Gutenberg Blocks and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Widget Post Overlay block in all versions up to, and including, 3.7.0 due to insufficient input...

REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018

The Rest views module lets site admins create rest exports in views with additional options for serializing data. This module does not accurately check access and may expose paths to unpublished content. This vulnerability is mitigated by the fact that there must be a specific content structure t...

Drupal REST Views module < 3.0.1 - Unauthenticated Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure vulnerability discovered by nicxvan in WordPress Module REST Views versions 3.0.1...

PT-2024-10129 · Drupal · Drupal Rest Views

Name of the Vulnerable Software and Affected Versions: Drupal REST Views versions 0.0.0 through 3.0.1 Description: The issue is related to the insertion of sensitive information into sent data, allowing forceful browsing. This can enable a remote attacker to gain unauthorized access to protected...

CVE-2024-31264

Unauthenticated Cross Site Request Forgery CSRF in Post Views Counter = 1.4.4 versions...

CVE-2024-31264 WordPress Post Views Counter plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Post Views Counter = 1.4.4 versions...

CVE-2024-31264 WordPress Post Views Counter plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Post Views Counter = 1.4.4 versions...

CVE-2024-31264

CVE-2024-31264 refers to an unauthenticated CSRF vulnerability in the WordPress plugin Post Views Counter, affecting version

PT-2024-23908 · Unknown · Post Views Counter

Name of the Vulnerable Software and Affected Versions: Post Views Counter versions 1.4.4 and earlier Description: The issue is related to an Unauthenticated Cross Site Request Forgery CSRF in the affected software. Recommendations: For Post Views Counter versions 1.4.4 and earlier, update to a...

WordPress Plugin Post Views Counter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

CVE-2024-3524

A vulnerability, which was classified as problematic, has been found in Campcodes Online Event Management System 1.0. This issue affects some unknown processing of the file /views/process.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotel...