17 matches found
EUVD-2024-22247
Malicious code in bioql PyPI...
CVE-2024-24884
Cross-Site Request Forgery CSRF vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 Connector: from n/a through 1.2.2...
CVE-2024-47310
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.3.17...
CVE-2023-47513 WordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.3.2 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in ARI Soft ARI Stream Quiz allows Code Injection.This issue affects ARI Stream Quiz: from n/a through 1.3.2...
CVE-2023-51487
Cross-Site Request Forgery CSRF vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32...
CVE-2023-51487
Cross-Site Request Forgery CSRF vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32...
CVE-2023-51487
CVE-2023-51487 is a CSRF vulnerability in the ARI Stream Quiz WordPress plugin, affecting ARI Stream Quiz versions up to 1.2.32. The connected documents confirm the issue exists and reference CSRF as the vulnerability type, but do not provide an explicit fixed version or patch details. Affected p...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 Connector: from n/a through 1.2.2...
CVE-2024-24884
Summary: CVE-2024-24884 is a CSRF vulnerability in the ARI Soft Contact Form 7 Connector plugin for WordPress. The issue affects versions up to and including 1.2.2 and can be triggered without authentication, enabling an attacker to induce state-changing actions in a user’s session. The patchstac...
PT-2024-20640 · Unknown · Ari Soft Contact Form 7 Connector
Name of the Vulnerable Software and Affected Versions: ARI Soft Contact Form 7 Connector versions 1.2.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the ARI Soft Contact Form 7 Connector. This type of issue allows an attacker to trick a user into performing unintended...
CVE-2023-52182
Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0...
CVE-2023-52182
AR I Stream Quiz – WordPress Quizzes Builder (ARI Stream Quiz) has a Deserialization of Untrusted Data vulnerability (PHP Object Injection) affecting versions up to 1.3.0. Exploitation requires authenticated access (Contributor+). The issue is mapped to CVE-2023-52182 and has been patched in late...
CVE-2023-47835
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plugin = 1.2.32 versions...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plugin = 1.2.32 versions...
CVE-2023-47835 WordPress ARI Stream Quiz Plugin <= 1.2.32 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plugin = 1.2.32 versions...
CVE-2023-47835
CVE-2023-47835 — ARI Stream Quiz (WordPress)
Joomla! Component ARI Quiz 3.7.4 - SQL Injection
Joomla! Component ARI Quiz 3.7.4 - SQL Injection Exploit Title: Joomla! Component ARI Quiz 3.7.4 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: April 27, 2019 Vendor Homepage: http://www.ari-soft.com Software Link :...