4 matches found
EUVD-2024-33806
Malicious code in bioql PyPI...
CVE-2024-11426
The AutoListicle: Automatically Update Numbered List Articles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'auto-list-number' shortcode in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping on user supplied...
CVE-2024-11426 AutoListicle: Automatically Update Numbered List Articles <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The AutoListicle: Automatically Update Numbered List Articles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'auto-list-number' shortcode in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping on user supplied...
WordPress AutoListicle Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)
Software AutoListicle Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11426 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 17eaf6e3feec Credits zakaria Required privilege...