Page Builder Gutenberg Blocks < 3.1.7 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC Create/Edit a Post, add an "Icon" block...

WordPress Elementor – Header, Footer & Blocks Template Plugin <= 1.6.24 is vulnerable to Cross Site Scripting (XSS)

Software Elementor – Header, Footer & Blocks Template Type Plugin Vulnerable versions = 1.6.24 Fixed in 1.6.25 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1237 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d8efb70c30ae...

WeasyPrint Security Vulnerability

WeasyPrint is Kozea open source an intelligent solution. Can help Web developers to create PDF files. WeasyPrint 61.0, 61.1 version of a security vulnerability , the vulnerability stems from allowing the contents of arbitrary files and URLs will be appended to the generated PDF document , even if...

Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 3.1.5 due to insufficient input sanitization and output escaping on us...

WordPress Otter Blocks PRO Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software Otter Blocks PRO Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1691 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 6a1016ee4455 Credits wesley wcraft Required...

WordPress Otter Blocks PRO Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software Otter Blocks PRO Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1684 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 337ee76a7920 Credits wesley wcraft Required...

BIT-MEDIAWIKI-2021-31554

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks for certain automatically created MediaWiki user accounts, thus allowing nefarious users to remain unblocked...

BIT-MEDIAWIKI-2021-36128

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented...

BIT-MEDIAWIKI-2023-36675

An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature...

Otter Blocks PRO < 2.6.4 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

Description The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file upload form, which allows SVG uploads, in all versions up to, and including, 2.6.3 due to insufficient input sanitization and...

Otter Blocks PRO < 2.6.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS

Description The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contact form file field CSS metabox in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output...

SUSE CVE-2023-52506

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set all reserved memblocks on Node0 at initialization After commit 61167ad5fecdea "mm: pass nid to reservebootmemregion" we get a panic if DEFERREDSTRUCTPAGEINIT is enabled: 0.000000 CPU 0 Unable to handle kernel pagin...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

Cross site scripting

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

Flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution that can be easily changed or added to code. A security vulnerability exists in flusity CMS version v2.33, which stems from a cross-site scripting XSS vulnerability in Custom Blocks...

PT-2024-21984 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: Flusity-CMS version 2.33 Description: The issue concerns Cross Site Scripting XSS in 'Custom Blocks.' Recommendations: For Flusity-CMS version 2.33, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

CVE-2024-27668

CVE-2024-27668 affects Flusity-CMS v2.33 with a Cross-Site Scripting (XSS) vulnerability in the Custom Blocks feature. The attached CVSS 3.1 metrics indicate a Medium base score (6.1) with a network attack vector, low attack complexity, and no privileges required, but user interaction is required...