11 matches found
EUVD-2024-52052
Malicious code in bioql PyPI...
CVE-2024-53719
Cross-Site Request Forgery CSRF vulnerability in onigetoc Zajax – Ajax Navigation zajax-ajax-navigation allows Stored XSS.This issue affects Zajax – Ajax Navigation: from n/a through = 0.4...
CVE-2024-53719
Cross-Site Request Forgery CSRF vulnerability in onigetoc Zajax – Ajax Navigation zajax-ajax-navigation allows Stored XSS.This issue affects Zajax – Ajax Navigation: from n/a through = 0.4...
CVE-2024-53719 WordPress Zajax – Ajax Navigation plugin <= 0.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in onigetoc Zajax – Ajax Navigation allows Stored XSS.This issue affects Zajax – Ajax Navigation: from n/a through 0.4...
CVE-2024-53719
CVE-2024-53719 involves a CSRF to Stored XSS in the WordPress plugin Zajax – Ajax Navigation (versions
CVE-2024-53719: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in onigetoc Zajax – Ajax Navigation zajax-ajax-navigation allows Stored XSS.This issue affects Zajax – Ajax Navigation: from n/a through = 0.4...
PT-2024-35826 · Unknown · Zajax – Ajax Navigation
Name of the Vulnerable Software and Affected Versions: Zajax – Ajax Navigation versions n/a through 0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Zajax – Ajax Navigation. This means an attacker can perform unauthorized actions on a user's...
WordPress Zajax – Ajax Navigation plugin <= 0.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Zajax – Ajax Navigation versions = 0.4...
WordPress Zajax – Ajax Navigation Plugin <= 0.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software Zajax – Ajax Navigation Type Plugin Vulnerable versions = 0.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53719 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3d6723133578 Credits SOPROBRO Requir...
CVE-2024-37943: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITHEMES YITH WooCommerce Ajax Product Filter yith-woocommerce-ajax-navigation.This issue affects YITH WooCommerce Ajax Product Filter: from n/a through = 5.1.0...