6537 matches found
CVE-2023-23894
CVE-2023-23894 pertains to a Stored XSS in the Surbma GDPR Proof Cookie Consent & Notice Bar plugin for WordPress (versions
Wordpress plugin Surbma | GDPR Proof Cookie Consent & Notice Bar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
SUSE CVE-2023-2463
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-25784
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bon Plan Gratos Sticky Ad Bar plugin = 1.3.1 versions...
CVE-2023-25784
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bon Plan Gratos Sticky Ad Bar plugin = 1.3.1 versions...
CVE-2023-25784
CVE-2023-25784 refers to an admin+ stored XSS in the WordPress plugin Sticky Ad Bar (older name variants) up to version 1.3.1. Public sources in the connected documents consistently describe the flaw as arising from inadequate sanitization/escaping of plugin settings, enabling stored XSS by high-...
CVE-2023-2463
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-2463
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
Design/Logic Flaw
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
WordPress plugin Sticky Ad Bar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2023-2463
CVE-2023-2463 : In Google Chrome (Android), an inappropriate implementation in Full Screen Mode could allow a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. Affected software is Chrome/Chromium family, with the issue linked to Full Screen handling. The vuln...
CVE-2023-2463
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-2463
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
WordPress Progress Bar Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
Software Progress Bar Type Plugin Vulnerable versions = 2.2.1 Fixed in 2.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23699 Patch priority Low CVSS severity Low 6.5 Developer jazzs3quence PSID f509ee490678 Credits yuyudhn Required privilege...
CVE-2023-2098
A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /inc/topBarNav.php. The manipulation of the argument search leads to cross site scripting. The attack may be launch...
Sourcecodester Vehicle Service Management System 跨站脚本漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. A cross-site scripting vulnerability exists in SourceCodester Vehicle Service Management System version 1.0, which originates from an unknow...
PT-2025-41064
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a flaw related to the md Multiple Devices subsystem. Specifically, the status resync function can experience a soft lockup during the calculation of 'curr resync -...
CVE-2023-23994
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...