CVE-2022-26366 WordPress AdRotate Banner Manager Plugin <= 5.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in AdRotate Banner Manager Plugin = 5.9 on WordPress...

CVE-2022-26366: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in AdRotate Banner Manager Plugin = 5.9 on WordPress...

WordPress plugin AdRotate Banner Manager has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Beautiful Cookie Consent Banner plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

PT-2022-17814 · WordPress · Adrotate Banner Manager Plugin

Name of the Vulnerable Software and Affected Versions: AdRotate Banner Manager Plugin versions = 5.9 Description: The issue is related to Cross-Site Request Forgery CSRF in the AdRotate Banner Manager Plugin on WordPress. Recommendations: For AdRotate Banner Manager Plugin versions = 5.9, update ...

CVE-2022-3823

The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

CVE-2022-3823

The CVE-2022-3823 entry concerns the WordPress plugin Beautiful Cookie Consent Banner (versions prior to 2.9.1). The issue is a failure to sanitise and escape certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (su...

WordPress plugin "Beautiful Cookie Consent Banner" has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

PT-2022-24299 · WordPress · The Beautiful Cookie Consent Banner

Name of the Vulnerable Software and Affected Versions: The Beautiful Cookie Consent Banner WordPress plugin versions prior to 2.9.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is...

CVE-2022-3823: Undefined Security Weakness

The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

CVE-2022-3992

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this vulnerability is an unknown functionality of the file admin/?page=systeminfo of the component Banner Image Handler. The manipulation leads to cross site scripting. The attack can...

banner-ad-toolkit (>=0.3.1, <=0.3.2), bcipy (>=1.1.1, <=1.2.0) +63 more potentially affected by CVE-2022-45198 via pillow (4.3.0)

pillow PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - banner-ad-toolkit =0.3.1, =1.1.1, =2.2.0, =1.4.9, =2.0.0, =0.1.0a0, =1.1.0, =0.23.0, =0.2.6, =0.6.0, =2.3.0.18073018, =2.3.6.19012721 and more Sourc...

CVE-2022-3992: Improper Neutralization

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this vulnerability is an unknown functionality of the file admin/?page=systeminfo of the component Banner Image Handler. The manipulation leads to cross site scripting. The attack can...

CVE-2022-3992 SourceCodester Sanitization Management System Banner Image cross site scripting

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this vulnerability is an unknown functionality of the file admin/?page=systeminfo of the component Banner Image Handler. The manipulation leads to cross site scripting. The attack can...

CVE-2022-3992

CVE-2022-3992 affects SourceCodester Sanitization Management System. The vulnerability is in an unknown functionality of the file admin/?page=system_info within the Banner Image Handler, enabling cross-site scripting. Attacks can be launched remotely; CVSS scores in the sources range from 6.1 (NV...

PT-2022-25114 · Sourcecodester · Sourcecodester Sanitization Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System affected versions not specified Description: A problematic vulnerability was found in the SourceCodester Sanitization Management System, affecting an unknown functionality of the file...

AdRotate Banner Manager < 5.9.1 - Password Change via CSRF

The plugin does not have CSRF checks in some places, which could allow attackers to make a logged admin change their password via CSRF attacks...

CVE-2022-44727

CVE-2022-44727 affects the PrestaShop EU Cookie Law GDPR (Banner + Blocker) module prior to version 2.1.3. The vulnerability is a SQL Injection via cookies lgcookieslaw or __lglaw, enabling unauthorized data access as described in multiple sources. Root cause: unsafely handled cookie data in the ...

CVE-2022-44727: Improper Neutralization of Special Elements used in an SQL Command

The EU Cookie Law GDPR Banner + Blocker module before 2.1.3 for PrestaShop allows SQL Injection via a cookie lgcookieslaw or lglaw...

Tenable Nessus < 8.15.5 Multiple Vulnerabilities (TNS-2022-12)

Tenable Nessus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus"; ifdescripti...