14 matches found
EUVD-2022-33754
Malicious code in bioql PyPI...
CVE-2022-29416
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Afterpay Gateway for WooCommerce = 3.5.0 versions...
WordPress Afterpay Gateway for WooCommerce Plugin < 1.12.4 is vulnerable to SQL Injection
Software Afterpay Gateway for WooCommerce Type Plugin Vulnerable versions 1.12.4 Fixed in 1.12.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2744 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID d0e7ba2b77fa Credits Arvandy Required privilege...
CVE-2022-29416
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Afterpay Gateway for WooCommerce = 3.5.0 versions...
CVE-2022-29416
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Afterpay Gateway for WooCommerce = 3.5.0 versions...
CVE-2022-29416
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Afterpay Gateway for WooCommerce = 3.5.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Afterpay Gateway for WooCommerce = 3.5.0 versions...
CVE-2022-29416
The CVE-2022-29416 entry covers a reflected cross-site scripting (XSS) vulnerability in the WordPress Afterpay Gateway for WooCommerce plugin. Affected version(s) are WooCommerce plugin For Afterpay Gateway versions prior to or equal to 3.5.0 (up to 3.5.0, with 3.5.1+ fixed). Root cause: improper...
CVE-2022-29416 WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Afterpay Gateway for WooCommerce = 3.5.0 versions...
WordPress plugin Afterpay Gateway for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2023-12969 · Afterpay · Afterpay Gateway For Woocommerce
Name of the Vulnerable Software and Affected Versions: Afterpay Gateway for WooCommerce versions prior to 3.5.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...
Afterpay Gateway for WooCommerce < 3.2.1 - Reflected Cross-Site Scripting
The plugin has sample files form the https://github.com/afterpay/sdk-php library, which do not escape some parameters before outputting them in attributes, leading to Reflected Cross-Site Scripting issues...
WordPress Afterpay Gateway for WooCommerce plugin <= 3.2.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Afterpay Gateway for WooCommerce plugin versions = 3.2.0. Solution Update the WordPress Afterpay Gateway for WooCommerce plugin to the latest available version at least 3.2.1...
Afterpay Gateway for WooCommerce < 3.2.1 - Reflected Cross-Site Scripting
The plugin has sample files form the https://github.com/afterpay/sdk-php library, which do not escape some parameters before outputting them in attributes, leading to Reflected Cross-Site Scripting issues. PoC...