CVE-2024-52437 WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Privilege Escalation.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-52437

CVE-2024-52437 affects the WordPress plugin Banner System (versions ≤ 1.0.0). It is a Missing Authentication for Critical Function vulnerability that allows Privilege Escalation . Public details identify the affected version range and the privilege-escalation impact; multiple sources (Wordfence I...

PT-2024-35277 · Unknown · Saul Morales Pacheco Banner System

Name of the Vulnerable Software and Affected Versions: Saul Morales Pacheco Banner System versions n/a through 1.0.0 Description: The issue is related to a Missing Authentication for Critical Function vulnerability, which allows Privilege Escalation in the Saul Morales Pacheco Banner System...

CVE-2024-52701

A stored cross-site scripting XSS vulnerability in the Configuration page of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter...

CVE-2024-52701

CVE-2024-52701 is a stored XSS in Piwigo v14.5.0 (Configuration page) where a crafted payload inserted into the Page banner parameter can execute arbitrary scripts/HTML in a victim’s browser. Affected software: Piwigo 14.5.0; impact is browser-based script execution with low integrity/confidentia...

PT-2024-35414 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 14.5.0 Description: A stored cross-site scripting XSS issue in the Configuration page allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page banner parameter. This could potential...

WordPress plugin Saul Morales Pacheco Banner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A security...

CVE-2024-51816

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saul Morales Pacheco Banner System banner-system allows Stored XSS.This issue affects Banner System: from n/a through = 1.0.0...

CVE-2024-51816

CVE-2024-51816 is a Stored XSS in the Banner System WordPress plugin (versions n/a through 1.0.0). The vulnerability arises from improper input neutralization during web page generation, impacting users who view banners. Public details across connected sources confirm the issue and affected range...

PT-2024-34943 · Unknown · Saul Morales Pacheco Banner System

Name of the Vulnerable Software and Affected Versions: Saul Morales Pacheco Banner System versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious...

Apache Tomcat XSS Vulnerability (Nov 2024) - Windows

Apache Tomcat is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat...

WordPress plugin Banner System 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Banner System versions = 1.0.0...

WordPress Banner System Plugin <= 1.0.0 is vulnerable to Privilege Escalation

Software Banner System Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-52437 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 9145175e73a6 Credits João Pedro S Alcântara Kinorth...

CVE-2024-52405

Unrestricted Upload of File with Dangerous Type vulnerability in bikramjoshii B-Banner Slider b-banner-slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through = 1.1...

CVE-2024-52405 WordPress B-Banner Slider plugin <= 1.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1...

CVE-2024-52405 WordPress B-Banner Slider plugin <= 1.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in bikramjoshii B-Banner Slider b-banner-slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through = 1.1...

CVE-2024-52405

CVE-2024-52405 : WordPress plugin B-Banner Slider

WordPress plugin B-Banner Slider 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue exists in the...

PT-2024-35244 · Unknown · B-Banner Slider

Name of the Vulnerable Software and Affected Versions: B-Banner Slider versions 1.1 and earlier Description: The issue is related to an unrestricted upload of files with dangerous types, allowing an attacker to upload a web shell to a web server. This poses a severe cybersecurity risk...