CVE-2024-52437

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-52437

CVE-2024-52437 affects the WordPress plugin Banner System (versions ≤ 1.0.0). It is a Missing Authentication for Critical Function vulnerability that allows Privilege Escalation . Public details identify the affected version range and the privilege-escalation impact; multiple sources (Wordfence I...

CVE-2024-52437 WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-52437 WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-52701

Piwigo version v14.5.0 is susceptible to a stored cross-site scripting (XSS) vulnerability within the Configuration page . An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the Page banner parameter. This could result in the execution of malicious code on a...

CVE-2024-52437: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-52701: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Configuration page of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter...

CVE-2024-52701

A stored cross-site scripting XSS vulnerability in the Configuration page of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter...

PT-2024-35414 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 14.5.0 Description: A stored cross-site scripting XSS issue in the Configuration page allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter. This could potential...

PT-2024-35277 · Unknown · Saul Morales Pacheco Banner System

Name of the Vulnerable Software and Affected Versions: Saul Morales Pacheco Banner System versions n/a through 1.0.0 Description: The issue is related to a Missing Authentication for Critical Function vulnerability, which allows Privilege Escalation in the Saul Morales Pacheco Banner System...

PT-2024-16457

Name of the Vulnerable Software and Affected Versions The Announcement & Notification Banner – Bulletin plugin for WordPress versions up to, and including, 3.11.7 Description The issue is related to Reflected Cross-Site Scripting, which occurs due to the use of add query arg and remove query arg...

WordPress plugin Saul Morales Pacheco has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A security...

CVE-2024-51816

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saul Morales Pacheco Banner System banner-system allows Stored XSS.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-51816

CVE-2024-51816 is a Stored XSS in the Banner System WordPress plugin (versions n/a through 1.0.0). The vulnerability arises from improper input neutralization during web page generation, impacting users who view banners. Public details across connected sources confirm the issue and affected range...

PT-2024-34943 · Unknown · Saul Morales Pacheco Banner System

Name of the Vulnerable Software and Affected Versions: Saul Morales Pacheco Banner System versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious...

Apache Tomcat XSS Vulnerability (Nov 2024) - Windows

Apache Tomcat is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat...

CVE-2024-51816: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saul Morales Pacheco Banner System banner-system allows Stored XSS.This issue affects Banner System: from n/a through = 1.0.0...

WordPress Plugin Banner System Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Banner System versions = 1.0.0...

WordPress Banner System Plugin <= 1.0.0 is vulnerable to Privilege Escalation

Software Banner System Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-52437 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 9145175e73a6 Credits João Pedro S Alcântara Kinorth...