EUVD-2023-43037

Malicious code in bioql PyPI...

CVE-2015-9465

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasrgetmultisetvaluesandfield SQL injection via the setid parameter...

CVE-2023-39305

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CVE-2023-39305 WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

PT-2024-12794

Name of the Vulnerable Software and Affected Versions Yet Another Stars Rating versions 3.4.3 and below Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels due to broken access control. This can b...

CVE-2023-39305: Missing Authorization

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CVE-2022-40699

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

Cross site scripting

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

CVE-2022-40699

CVE-2022-40699 affects WordPress Yet Another Stars Rating (YASR) plugin, specifically versions ≤ 3.1.2. The vulnerability is Cross-Site Scripting (XSS); multiple sources describe an XSS issue in this plugin version. Patchstack lists the fix as version 3.1.3, indicating the issue was addressed by ...

CVE-2022-40699

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

CVE-2022-40699: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

PT-2022-16383

Name of the Vulnerable Software and Affected Versions Yasr – Yet Another Stars Rating WordPress plugin versions = 2.9.9 Description A Cross-Site Scripting XSS issue was found, related to the source parameter. Recommendations For Yasr – Yet Another Stars Rating WordPress plugin versions = 2.9.9,...

CVE-2022-23980: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin versions = 2.9.9, vulnerable at parameter 'source'...

WordPress Yet Another Stars Rating PHP Object Injection

class MetasploitModule 'WordPress PHP Object Injection in Yet Another Stars Rating plugin %q This module exploits Wordpress PHP Object Injection in Yet Another Stars Rating plugin = 5.5.2, so the exploit only works for Wordpress versions 'Paul Dannewitz', Vulnerability Discovery 'gx1 ', Exploit...

PT-2019-7424

Name of the Vulnerable Software and Affected Versions yet-another-stars-rating plugin versions prior to 0.9.1 Description The issue is related to SQL injection via the set id parameter in the yasr get multi set values and field function. This allows for potential exploitation. No information is...

CVE-2015-9465: Improper Neutralization of Special Elements used in an SQL Command

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasrgetmultisetvaluesandfield SQL injection via the setid parameter...