49 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...
CVE-2023-41672
CVE-2023-41672 relates to a CSRF vulnerability in the WordPress plugin Hide admin notices – Admin Notification Center (
CVE-2023-41672 WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...
WordPress Plugin Hide admin notices - Admin Notification Center Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Hide admin notices - Admin Notification...
CVE-2023-41672: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...
PT-2023-29139 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. This vulnerability is present in the component admin notify.php. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin...
WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Hide admin notices – Admin Notification Center Type Plugin Vulnerable versions = 2.3.2 Fixed in 2.3.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41672 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...
CVE-2022-46087: Improper Neutralization of Input During Web Page Generation
CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user...
VulnCheck KEV: CVE-2021-24527
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such...
CVE-2022-1605
CVE-2022-1605 affects the WordPress Email Users plugin up to version 4.8.8. The vulnerability is a CSRF flaw in the settings update, potentially allowing a logged-in administrator to change notification settings via CSRF. Affected component: Email Users plugin’s settings update mechanism (no CSRF...
CVE-2021-24527
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such...
EUVD-2021-11439
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such...
CVE-2021-30140
LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content such as SVG with HTML content, the payload is executed upon a click. This is fixed in 3.5...
GitLab Cross-Site Scripting Vulnerability (CNVD-2020-27233)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in the Admin...
CVE-2020-12276
GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature...
CVE-2020-12276
GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature...
CVE-2020-12276
GitLab CVE-2020-12276 affects GitLab versions 9.5.9–12.9 with a stored XSS in the Admin Notification feature. The issue’s root cause is a stored cross-site scripting vulnerability; impact is client-side code execution in affected deployments (CVSS v3.1: 4.8 MEDIUM). A fix was released in GitLab 1...
CVE-2020-12276
Removed by vendor...
