162 matches found
Flask App Builder 安全漏洞
Flask App Builder is a simple and fast application development framework by Daniel Vaz Gaspar Personal Developer. A security vulnerability exists in Flask App Builder versions prior to 4.5.1 that stems from allowing the browser to store sensitive data locally...
CVE-2024-7651
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2024-7651 App Builder – Create Native Android & iOS Apps On The Flight <= 4.2.6 - Unauthenticated Limited SQL Injection via app-builder-search
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2024-7651
CVE-2024-7651 affects the WordPress plugin “App Builder – Create Native Android & iOS Apps On The Flight”. The vulnerability is an unauthenticated limited SQL injection via the app-builder-search parameter in versions up to 4.2.6, caused by insufficient escaping and lack of proper query preparati...
CVE-2024-7651 App Builder – Create Native Android & iOS Apps On The Flight <= 4.3.3 - Unauthenticated Limited SQL Injection via app-builder-search
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...
WordPress App Builder plugin <= 4.3.3 - Unauthenticated Limited SQL Injection via app-builder-search vulnerability
Unauthenticated Limited SQL Injection via app-builder-search vulnerability discovered by vgo0 in WordPress Plugin App Builder versions = 4.3.3...
WordPress App Builder Plugin <= 4.3.3 is vulnerable to SQL Injection
Software App Builder Type Plugin Vulnerable versions = 4.3.3 Fixed in 4.3.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-7651 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 4b83b8e2e95a Credits vgo0 Required privilege Unauthenticated Published 21...
WordPress plugin App Builder 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-38481 · WordPress · The App Builder – Create Native Android & Ios Apps On The Flight
Name of the Vulnerable Software and Affected Versions: The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress versions up to, and including, 4.2.6 Description: The issue is related to limited SQL Injection via the app-builder-search parameter due to insufficient...
App Builder < 3.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Description The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping on user supplied...
CVE-2024-32565
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appcheap.Io App Builder allows Stored XSS.This issue affects App Builder: from n/a through 3.8.8...
CVE-2024-32565
CVE-2024-32565 affects App Builder (Appcheap.IO) WordPress plugin. It is a Stored XSS via Shortcode caused by improper input neutralization during web page generation, affecting App Builder versions up to 3.8.8 (from n/a). The vulnerability is documented with a 3.8.8 upper bound and a Patch Statu...
CVE-2024-32565 WordPress App Builder plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appcheap.Io App Builder allows Stored XSS.This issue affects App Builder: from n/a through 3.8.8...
CVE-2024-32565 WordPress App Builder plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appcheap.Io App Builder allows Stored XSS.This issue affects App Builder: from n/a through 3.8.8...
PT-2024-24686 · Unknown · Appcheap.Io App Builder
Name of the Vulnerable Software and Affected Versions: Appcheap.Io App Builder versions 3.8.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...
WordPress Plugin App Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...
WordPress App Builder plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin App Builder versions = 3.8.8...
WordPress App Builder Plugin <= 3.8.8 is vulnerable to Cross Site Scripting (XSS)
Software App Builder Type Plugin Vulnerable versions = 3.8.8 Fixed in 3.8.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32565 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 17e0f44ec6e6 Credits LVT-tholv2k Required privilege Contributor...
App Builder < 3.8.8 - Open Redirection
Description The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.8.7. This is due to insufficient validation on the redirect url supplied via the 'url' parameter. This makes it possible for...