PT-2024-24686 · Unknown · Appcheap.Io App Builder

Name of the Vulnerable Software and Affected Versions: Appcheap.Io App Builder versions 3.8.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

WordPress App Builder plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin App Builder versions = 3.8.8...

WordPress App Builder Plugin <= 3.8.8 is vulnerable to Cross Site Scripting (XSS)

Software App Builder Type Plugin Vulnerable versions = 3.8.8 Fixed in 3.8.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32565 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 17e0f44ec6e6 Credits LVT-tholv2k Required privilege Contributor...

App Builder < 3.8.8 - Open Redirection

Description The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.8.7. This is due to insufficient validation on the redirect url supplied via the 'url' parameter. This makes it possible for...

CVE-2024-31282

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Appcheap.Io App Builder.This issue affects App Builder: from n/a through 3.8.7...

CVE-2024-31282

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Appcheap.Io App Builder.This issue affects App Builder: from n/a through 3.8.7...

CVE-2024-31282 WordPress App Builder plugin <= 3.8.7 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Appcheap.Io App Builder.This issue affects App Builder: from n/a through 3.8.7...

CVE-2024-31282

CVE-2024-31282 is an Open Redirect vulnerability in App Builder (WordPress/plugin), affecting versions from n/a up to 3.8.7. The issue is described as a URL redirection to an untrusted site. Reports in connected docs confirm the vulnerability type and affected range; a patched release exists, and...

CVE-2024-31282 WordPress App Builder plugin <= 3.8.7 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Appcheap.Io App Builder.This issue affects App Builder: from n/a through 3.8.7...

PT-2024-23928 · Unknown · App Builder

Name of the Vulnerable Software and Affected Versions: App Builder versions 3.8.7 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This means that the App Builder can be tricked into redirecting users to untruste...

WordPress App Builder plugin <= 3.8.7 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin App Builder versions = 3.8.7...

WordPress App Builder Plugin <= 3.8.7 is vulnerable to Open Redirection

Software App Builder Type Plugin Vulnerable versions = 3.8.7 Fixed in 3.8.8 OWASP Top 10 A4: Insecure Design Classification Open Redirection CVE CVE-2024-31282 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID d4752ee01a2d Credits Yudistira Arya Required privilege...

CVE-2024-25708

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s...

CVE-2024-25708

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s...

CVE-2024-25700

The CVE concerns Esri Portal for ArcGIS Enterprise Web App Builder (versions 11.1 and below). A stored Cross-site Scripting (XSS) condition can arise when an attacker with high privileges creates a crafted link stored in a web map; when clicked, it could execute arbitrary JavaScript in the victim...

CVE-2024-25708

Esri Portal for ArcGIS Enterprise Web App Builder (versions 10.9.1 and below) is affected by a stored Cross-site Scripting vulnerability. The issue allows a remote, authenticated attacker to create a crafted link that, when clicked, could execute arbitrary JavaScript in the victim’s browser. The ...

CVE-2024-25708 Persistent XSS when creating new application using Web App Builder

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s...

PT-2024-21099 · Esri · Arcgis Enterprise Builder

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Enterprise Web App Builder versions 11.1 and below Description: The issue is a stored Cross-site Scripting vulnerability that may allow a remote, authenticated attacker to create a crafted link stored in a web map link...

PT-2024-21104 · Esri · Esri Portal For Arcgis Enterprise Web App Builder

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Enterprise Web App Builder versions 10.8.1 through 10.9.1 Description: The issue is a stored Cross-site Scripting vulnerability that may allow a remote, authenticated attacker to create a crafted link which, when clicke...

Privilege Escalation

app-builder-lib is vulnerable to Privilege escalation. The vulnerability is due to NSExec searching the current directory of the installer before searching the system's PATH when making a system call to open cmd.exe in the .nsh installer script. This flaw allows an attacker to exploit the situati...