CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714

CVE-2024-12714 concerns the Backlink Monitoring Manager WordPress plugin (up to version 0.1.3). The issue is a Reflected Cross-Site Scripting caused by not sanitising/escaping a parameter before output. This could affect high-privilege users such as admins. The WordFence record indicates the vuln...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress plugin Backlink Monitoring Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-1936 · WordPress · Backlink Monitoring Manager

Name of the Vulnerable Software and Affected Versions: Backlink Monitoring Manager WordPress plugin versions 0.1.3 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the...

AnyDesk 后置链接漏洞

AnyDesk is a remote desktop connection software from AnyDesk, a German company. AnyDesk suffers from a backlink vulnerability that originates from a flaw in the background image processing, which can be exploited by a local attacker to read arbitrary files and disclose sensitive information...

Panda Security Dome 后置链接漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from Panda Security Spain. Panda Security Dome suffers from a back-link vulnerability. An attacker exploiting this vulnerability could elevate privileges and execute arbitrary code in a SYSTEM environment...

Wacom Center 后置链接漏洞

Wacom Center is a driver from Wacom USA. A backlink vulnerability exists in Wacom Center that stems from the presence of a local elevation of privilege vulnerability that allows a local attacker to elevate privileges and execute arbitrary code in the SYSTEM context...

QNAP Systems Qsync Central 后置链接漏洞

QNAP Systems Qsync Central is a cloud-based file synchronization service on a NAS from China Weilian Technology QNAP Systems. A backlink vulnerability exists in QNAP Systems Qsync Central version 4.4.0.1620240819 and prior versions, which stems from the inclusion of a link tracking vulnerability...

SUSE Manager 后置链接漏洞

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration and monitoring. SUSE Manager suffers from a back-link vulnerability that originates from an attacker who is allowed to create a specially crafted git...

AVG AntiVirus Free 后置链接漏洞

AVG AntiVirus Free is a free antivirus program from AVG. AVG AntiVirus Free suffers from a back-link vulnerability that stems from a local elevation of privilege issue that could allow an attacker to delete files, which in turn could elevate privileges and execute arbitrary code in a SYSTEM...

Malwarebytes Anti-Malware 后置链接漏洞

Malwarebytes Anti-Malware is a Windows-based security protection software from Malwarebytes. The software is capable of detecting and removing ransomware, malware, and more. Malwarebytes Anti-Malware suffers from a backlink vulnerability that stems from the presence of a local elevation of...

VIPRE Advanced Security 后置链接漏洞

VIPRE Advanced Security is an antivirus security software from VIPRE Corporation. VIPRE Advanced Security suffers from a back-link vulnerability that originates from a vulnerability that could allow a local attacker to elevate privileges on an affected installation and execute arbitrary code in a...

Avast Cleanup 后置链接漏洞

Avast Cleanup is a computer cleaning software from Avast. Avast Cleanup suffers from a back-link vulnerability that stems from the presence of a local elevation of privilege issue that could allow an attacker to elevate privileges and execute arbitrary code on an affected installation...

Avast Cleanup 后置链接漏洞

Avast Cleanup is a computer cleaning software from Avast. Avast Cleanup suffers from a back-link vulnerability that stems from the presence of a local elevation of privilege issue that could allow an attacker to elevate privileges and execute arbitrary code on an affected installation...

F-Secure Total 后置链接漏洞

F-Secure Total is an online protection program from Finnish company Fen Security F-Secure. F-Secure Total suffers from a backlink vulnerability that stems from improper handling of symbolic links in the WithSecure plugin hosting service, which could allow a local attacker to leverage administrato...

AVG AntiVirus Free 后置链接漏洞

AVG AntiVirus Free is a suite of free antivirus software from AVG. AVG AntiVirus Free suffers from a back-link vulnerability that originates from an attacker being able to create a denial-of-service condition on an affected installation, leaving it susceptible to denial-of-service attacks...

VIPRE Advanced Security 后置链接漏洞

VIPRE Advanced Security is an antivirus security software from VIPRE Corporation. VIPRE Advanced Security suffers from a backlink vulnerability that stems from improper handling of symbolic links, which could allow a local attacker to elevate privileges on an affected installation and execute...

Avast Free Antivirus 后置链接漏洞

Avast Free Antivirus is a suite of free antivirus software from the Czech company Avast. Avast Free Antivirus suffers from a backlink vulnerability that originates from allowing a local attacker to abuse the service by creating symbolic links to create folders that are vulnerable to denial of...