EUVD-2023-43037

Malicious code in bioql PyPI...

CVE-2015-9465

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasrgetmultisetvaluesandfield SQL injection via the setid parameter...

CVE-2023-39305

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CVE-2023-39305 WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CVE-2023-39305: Missing Authorization

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CVE-2022-40699

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

Cross site scripting

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

CVE-2022-40699

CVE-2022-40699 affects WordPress Yet Another Stars Rating (YASR) plugin, specifically versions ≤ 3.1.2. The vulnerability is Cross-Site Scripting (XSS); multiple sources describe an XSS issue in this plugin version. Patchstack lists the fix as version 3.1.3, indicating the issue was addressed by ...

CVE-2022-40699: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

CVE-2022-23980: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin versions = 2.9.9, vulnerable at parameter 'source'...

WordPress Yet Another Stars Rating PHP Object Injection

class MetasploitModule 'WordPress PHP Object Injection in Yet Another Stars Rating plugin %q This module exploits Wordpress PHP Object Injection in Yet Another Stars Rating plugin = 5.5.2, so the exploit only works for Wordpress versions 'Paul Dannewitz', Vulnerability Discovery 'gx1 ', Exploit...

CVE-2015-9465: Improper Neutralization of Special Elements used in an SQL Command

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasrgetmultisetvaluesandfield SQL injection via the setid parameter...