SUSE CVE-2020-15664

By holding a reference to the eval function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious...

SUSE CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

SUSE CVE-2021-45085

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...

soybase.org Cross Site Scripting vulnerability OBB-3177433

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gatchfanfic.com Cross Site Scripting vulnerability OBB-3144399

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

omnia-raczynscy.pl Cross Site Scripting vulnerability OBB-3071621

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird arises from the improper use of privileged APIs, allowing an attacker to install extensions.

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird is related to the improper use of privileged APIs. Exploiting this vulnerability allows a malicious actor to install extensions by capturing the link to the eval function from the about:blank window, there...

CVE-2022-36387

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36387

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36427

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

CVE-2022-36427

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

Improper access control

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

Improper access control

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

CVE-2022-36427

The CVE-2022-36427 entry concerns the WordPress About Rentals plugin (versions

CVE-2022-36427 WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

CVE-2022-36387 WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36387

CVE-2022-36387 affects the WordPress plugin About Me (versions ≤ 1.0.12). The issue is described as a Broken Access Control vulnerability, enabling an authenticated user (e.g., a Subscriber) to perform unsafe actions via AJAX, including arbitrary network creation/deletion . This stems from insuff...

CVE-2022-36387 WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

PT-2022-23346 · WordPress · Aboutme

Name of the Vulnerable Software and Affected Versions: About Me plugin versions prior to 1.0.13 Description: The issue is related to a Broken Access Control vulnerability. Recommendations: For versions prior to 1.0.13, update to version 1.0.13 or later to resolve the issue...

WordPress plugin About Me 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...