CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin (through version 0.1.3 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to sanitize and escape a parameter before outputting it back to the page. This vulnerability could be exploited against high-privilege us...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress plugin Backlink Monitoring Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-12714: Improper Neutralization of Input During Web Page Generation

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-1936 · WordPress · Backlink Monitoring Manager

Name of the Vulnerable Software and Affected Versions: Backlink Monitoring Manager WordPress plugin versions 0.1.3 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the...

Panda Security Dome 后置链接漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from Panda Security Spain. Panda Security Dome suffers from a back-link vulnerability. An attacker exploiting this vulnerability could elevate privileges and execute arbitrary code in a SYSTEM environment...

AnyDesk 后置链接漏洞

AnyDesk is a remote desktop connection software from AnyDesk, a German company. AnyDesk suffers from a backlink vulnerability that originates from a flaw in the background image processing, which can be exploited by a local attacker to read arbitrary files and disclose sensitive information...

Wacom Center 后置链接漏洞

Wacom Center is a driver from Wacom USA. A backlink vulnerability exists in Wacom Center that stems from the presence of a local elevation of privilege vulnerability that allows a local attacker to elevate privileges and execute arbitrary code in the SYSTEM context...

QNAP Systems Qsync Central 后置链接漏洞

QNAP Systems Qsync Central is a cloud-based file synchronization service on a NAS from China Weilian Technology QNAP Systems. A backlink vulnerability exists in QNAP Systems Qsync Central version 4.4.0.1620240819 and prior versions, which stems from the inclusion of a link tracking vulnerability...

SUSE Manager 后置链接漏洞

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration and monitoring. SUSE Manager suffers from a back-link vulnerability that originates from an attacker who is allowed to create a specially crafted git...

Avast Cleanup 后置链接漏洞

Avast Cleanup is a computer cleaning software from Avast. Avast Cleanup suffers from a back-link vulnerability that stems from the presence of a local elevation of privilege issue that could allow an attacker to elevate privileges and execute arbitrary code on an affected installation...

Panda Security Dome 后置链接漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from Spanish company Panda Security. Panda Security Dome suffers from a back-linking vulnerability, which stems from a link-following mechanism in the PSANHost executable, that could allow a local attacker to elevate privilege...

Avast Free Antivirus 后置链接漏洞

Avast Free Antivirus is a suite of free antivirus software from the Czech company Avast. A backlink vulnerability exists in Avast Free Antivirus that stems from a local elevation of privilege issue that could allow an attacker to elevate privileges on an affected installation and execute arbitrar...

F-Secure Total 后置链接漏洞

F-Secure Total is an online protection program from Finnish company Fen Security F-Secure. F-Secure Total suffers from a backlink vulnerability that stems from improper handling of symbolic links in the WithSecure plugin hosting service, which could allow a local attacker to leverage administrato...

VIPRE Advanced Security 后置链接漏洞

VIPRE Advanced Security is an antivirus security software from VIPRE Corporation. VIPRE Advanced Security suffers from a backlink vulnerability that stems from improper handling of symbolic links, which could allow a local attacker to elevate privileges on an affected installation and execute...

Avast Cleanup 后置链接漏洞

Avast Cleanup is a computer cleaning software from Avast. Avast Cleanup suffers from a back-link vulnerability that stems from the presence of a local elevation of privilege, which can be exploited by an attacker to elevate privileges and execute arbitrary code in a system environment...

Avast Cleanup 后置链接漏洞

Avast Cleanup is a computer cleaning software from Avast. Avast Cleanup suffers from a back-link vulnerability that stems from the presence of a local elevation of privilege issue that could allow an attacker to elevate privileges and execute arbitrary code on an affected installation...

AVG AntiVirus Free 后置链接漏洞

AVG AntiVirus Free is a suite of free antivirus software from AVG. AVG AntiVirus Free suffers from a back-link vulnerability that originates from an attacker being able to create a denial-of-service condition on an affected installation, leaving it susceptible to denial-of-service attacks...

VIPRE Advanced Security 后置链接漏洞

VIPRE Advanced Security is an antivirus security software from VIPRE Corporation. VIPRE Advanced Security suffers from a back-link vulnerability that originates from a vulnerability that could allow a local attacker to elevate privileges on an affected installation and execute arbitrary code in a...

G DATA Software Total Security 后置链接漏洞

G Data G DATA Software Total Security is a suite of antivirus software from the German company G Data. The software is anti-phishing, anti-virus and anti-spam. G DATA Software Total Security suffers from a backlink vulnerability that originates from allowing a local attacker to overwrite a file b...