303 matches found
CVE-2024-6536 Zephyr Project Manager < 3.3.99 - Editor+ XSS
The Zephyr Project Manager WordPress plugin before 3.3.99 does not sanitise and escape some of its settings, which could allow high privilege users such as editors and admins to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...
CVE-2024-6536 Zephyr Project Manager < 3.3.99 - Editor+ XSS
The Zephyr Project Manager WordPress plugin before 3.3.99 does not sanitise and escape some of its settings, which could allow high privilege users such as editors and admins to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...
WordPress Zephyr Project Manager Plugin < 3.3.99 is vulnerable to Cross Site Scripting (XSS)
Software Zephyr Project Manager Type Plugin Vulnerable versions 3.3.99 Fixed in 3.3.99 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6536 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7446412b149f Credits Adrian Peña...
WordPress plugin Zephyr Project Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability
Sensitive Data Exposure via Export File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Zephyr Project Manager versions = 3.3.99...
WordPress Zephyr Project Manager Plugin <= 3.3.99 is vulnerable to Sensitive Data Exposure
Software Zephyr Project Manager Type Plugin Vulnerable versions = 3.3.99 Fixed in 3.3.100 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-38761 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 36e0747c0acc Credits Joshua Chan...
CVE-2024-37484
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...
CVE-2024-37484
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...
CVE-2024-37484 WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...
CVE-2024-37484
CVE-2024-37484 relates to Zephyr Project Manager. The Zephyr Project Manager product (affected versions from n/a up to 3.3.97) is vulnerable to Privilege Escalation via a User Meta Update when accessed by an authenticated user with LOW privileges. The issue is categorized under Improp er Privileg...
CVE-2024-37484 WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...
WordPress plugin Zephyr Project Manager security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-27593 · Unknown · Zephyr Project Manager
Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions n/a through 3.3.97 Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in the Zephyr Project Manager. Recommendations: For versions n/a through 3.3.97, update t...
WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by shaman0x01 Patchstack Alliance in WordPress Plugin Zephyr Project Manager versions = 3.3.97...
WordPress Zephyr Project Manager Plugin <= 3.3.97 is vulnerable to Privilege Escalation
Software Zephyr Project Manager Type Plugin Vulnerable versions = 3.3.97 Fixed in 3.3.99 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-37484 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 0ba7243a615b Credits shaman0x01 Required...
Zephyr Security Breach
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.6 and earlier versions, which stems from the presence of a null pointer dereference that could allow an attacker to launch a denial-of-service attack against a...
PT-2024-15077 · Zephyrproject Rtos +1 · Zephyr
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an unchecked length coming from user input in the settings shell. This could potentially lead to exploitation. No specific details about affected devices or...
zephyr Security Breach
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.5 and earlier versions, which stems from the length of unchecked user input in Shell settings...