CVE-2023-48321 WordPress Accelerated Mobile Pages Plugin <= 1.0.88.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ahmed Kaludi, Mohammed Kaludi AMP for WP – Accelerated Mobile Pages allows Stored XSS.This issue affects AMP for WP – Accelerated Mobile Pages: from n/a through 1.0.88.1...

WordPress Plugin AMP for WP Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress AMP for WP Plugin <= 1.0.88.1 is vulnerable to Cross Site Scripting (XSS)

Software AMP for WP Type Plugin Vulnerable versions = 1.0.88.1 Fixed in 1.0.89 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48321 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b9382afe26c0 Credits Ngô Thiên An ancorn from VNPT-VCI...

Scattered Spider

SUMMARY The Federal Bureau of Investigation FBI and Cybersecurity and Infrastructure Security Agency CISA are releasing this joint Cybersecurity Advisory CSA in response to recent activity by Scattered Spider threat actors against the commercial facilities sectors and subsectors. This advisory...

WordPress AMP+ Plus Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Software AMP+ Plus Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5210 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dc153061411b Credits Nicolas Surribas Required...

AMP+ Plus <= 3.0 - Reflected Cross Site Scripting

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin https://example.com/?p=1&yolo=%22%3E%3CScRiPt%3Ealert%28%27XSS%27%29%3C%2FsCrIpT%3E...

AMP+ Plus <= 3.0 - Reflected Cross Site Scripting

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC https://example.com/?p=1=%22%3E%3CScRiPt%3Ealert%28%27XSS%27%29%3C%2FsCrIpT%3E...

Advisory ROSA-SA-2023-2285

software: clamav 0.103.8 WASP: ROSA-CHROME packageevrstring: clamav-0.103.8-1.src.rpm CVE-ID: CVE-2022-20698 BDU-ID: 2022-00587 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the Clam AntiVirus software package is related to insufficient input validation. Exploitation of the vulnerability could...

CVE-2023-45831

Cross-Site Request Forgery CSRF vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin = 1.5.15 versions...

CVE-2023-45831

Cross-Site Request Forgery CSRF vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin = 1.5.15 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin = 1.5.15 versions...

CVE-2023-45831

CVE-2023-45831 affects the AMP WP – Google AMP For WordPress plugin. The vulnerability is a Cross-Site Request Forgery (CSRF) in versions

CVE-2023-45831 WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin = 1.5.15 versions...

CVE-2023-45831 WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin = 1.5.15 versions...

PT-2023-29718 · WordPress · Mohsin Rafique Amp Wp – Google Amp For Wordpress

Name of the Vulnerable Software and Affected Versions: Mohsin Rafique AMP WP – Google AMP For WordPress plugin versions = 1.5.15 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web applicati...

WordPress Plugin AMP WP - Google AMP For WordPress Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin AMP WP - Google AMP F...

WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)

Software AMP WP Type Plugin Vulnerable versions = 1.5.15 Fixed in 1.5.16 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45831 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 97ac1ef22e23 Credits qilin99 Required privilege...

Security Bulletin: IBM i is vulnerable to a local privilege escalation due to a flaw in IBM Backup, Recovery & Media Services for i (CVE-2023-40377).

Summary IBM i is vulnerable to a local privilege escalation due to a flaw in IBM Backup, Recovery & Media Services BRMS for i as described in the vulnerability details section. IBM Backup, Recovery & Media Services BRMS for i has addressed the vulnerability with a fix as described in the...

Mitsubishi Electric FA Engineering Software (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION : Low attack complexity Vendor : Mitsubishi Electric Equipment : FA Engineering Software Products Vulnerability : Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...