CVE-2024-51643

Cross-Site Request Forgery CSRF vulnerability in ragaskar Amazon Associate Filter amazon-associate-filter allows Stored XSS.This issue affects Amazon Associate Filter: from n/a through = 0.4...

CVE-2024-51643

Cross-Site Request Forgery CSRF vulnerability in ragaskar Amazon Associate Filter amazon-associate-filter allows Stored XSS.This issue affects Amazon Associate Filter: from n/a through = 0.4...

CVE-2024-51643 WordPress Amazon Associate Filter plugin <= 0.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ragaskar Amazon Associate Filter amazon-associate-filter allows Stored XSS.This issue affects Amazon Associate Filter: from n/a through = 0.4...

CVE-2024-51643

CVE-2024-51643 is a CSRF to Stored XSS vulnerability affecting the WordPress Amazon Associate Filter plugin (versions up to 0.4). The issue arises from CSRF that can lead to stored XSS within the affected plugin. Public exploit details are not provided in the available documents. Remediation guid...

CVE-2024-51643 WordPress Amazon Associate Filter plugin <= 0.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ragaskar Amazon Associate Filter amazon-associate-filter allows Stored XSS.This issue affects Amazon Associate Filter: from n/a through = 0.4...

WordPress plugin Amazon Associate Filter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-34787 · WordPress · Amazon Associate Filter

Name of the Vulnerable Software and Affected Versions: Amazon Associate Filter versions 0.4 and earlier Description: A Cross-Site Request Forgery CSRF vulnerability allows Stored XSS attacks. This issue affects the Amazon Associate Filter plugin for WordPress. Remediation is crucial to safeguard...

CVE-2024-51643: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ragaskar Amazon Associate Filter amazon-associate-filter allows Stored XSS.This issue affects Amazon Associate Filter: from n/a through = 0.4...

WordPress Amazon Associate Filter plugin <= 0.4 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Amazon Associate Filter versions = 0.4...

WordPress Amazon Associate Filter Plugin <= 0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Amazon Associate Filter Type Plugin Vulnerable versions = 0.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51643 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 96042002bd47 Credits SOPROBRO Requir...

CVE-2023-3714

The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'editgroup' handler in versions up to, and including, 5.5.2. This makes it possible for authenticated attackers, with group ownership, to update group options, includin...

PT-2023-25800 · WordPress · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid plugin for WordPress versions up to, and including, 5.5.2 Description: The issue is related to a missing capability check on the 'edit group' handler, allowing authenticated attackers with group ownership to update group options,...

Atlassian Jira 跨站脚本漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira Server and Data Center versions prior to 8.18.0, which originates from...

Shenzhen Edmansi Technology Co., Ltd. soft Xietong there are information leakage vulnerabilities

SoftAssociate is a set of association office management software customized and developed specifically for software industry associations. Shenzhen Edmansi Technology Co., Ltd. soft Xietong there is an information leakage vulnerability, attackers can use the vulnerability to obtain sensitive...

Google's Plan to Crunch Health Data on Millions of Patients Draws Fire

Tech behemoth Google is using artificial intelligence to reportedly slice and dice personal healthcare details on millions of Americans. That has some researchers diagnosing the company with HIPAA violations and prescribing regulatory controls as a remedy. And, at least one federal regulator is...

CVE-2016-7326

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

gemsalongthemohawk.com XSS vulnerability

Vulnerable URL: http://gemsalongthemohawk.com/associate-detail.php?a=Vernon-Downs-Casino-&-Hotel=56%22%27--!%3E%3CHtml%20Onmouseenter=confirmOPENBUGBOUNTY%20%3C!--//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...

CVE-2014-3900: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/picturemodify.php in the photo-edit subsystem in Piwigo 2.6.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the associate field, a different vulnerability than CVE-2014-4649...

Mambo Component Awesom <= 0.3.2 (listid) SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomawesom AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :comawesom ı changed ATATÜRK.com's db. soo dont look ATATÜRK.com db si değiştirilip kullanıcısına bildirilmiştir. EXPLOIT :...

CVE-2014-4649: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...