5242 matches found
OpenJDK: segmentation fault in ciMethodBlocks
A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::makeblockat function in OpenJDK HotSpot VM 8 11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively, and may allow an attacker to cause a denial of service...
CVE-2023-30148
Multiple Stored Cross Site Scripting XSS vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart multihtmlblock version 1.0.0, allows remote authenticated users to inject arbitrary web script or HTML via the bodytext or bodytextrude field in /sourcefiles/BlockhtmlClass.php an...
Urvanov Syntax Highlighter < 2.8.34 - Highlighting Blocks Mgt via CSRF
Description The plugin does not have CSRF checks when managing highlighting blocks, which could allow attackers to make logged in admins update, create, duplicate and delete them via CSRF attacks...
RiteCMS Cross-Site Scripting Vulnerability (CNVD-2026-05346)
RiteCMS is an open source content management system based on php and sqlite. RiteCMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via a specially crafted payload in Global Content Blocks in the Administration Menu...
CVE-2023-41732
Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...
CVE-2023-41732
Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...
CVE-2023-41732 WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...
CVE-2023-41732
CVE-2023-41732 affects the WordPress plugin CP Blocks (CodePeople CP Blocks)
CVE-2023-41732 WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...
WordPress ProductX – Gutenberg WooCommerce Blocks Plugin <= 2.7.8 is vulnerable to Broken Access Control
Software ProductX – Gutenberg WooCommerce Blocks Type Plugin Vulnerable versions = 2.7.8 Fixed in 3.0.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-45271 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ca21a9a7374c Credits Abdi...
WordPress Plugin CP Blocks Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress Plugin The Post Grid - Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin The Post Grid - Shortcode,...
CVE-2023-44262
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...
CVE-2023-44262
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...
CVE-2023-44262 WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...
CVE-2023-44262 WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...
CVE-2023-44262
CVE-2023-44262 affects the WordPress Blocks plugin up to version 1.6.41. The vulnerability is an Auth. (admin+) Stored Cross-Site Scripting (XSS) caused by insufficient input validation/escaping of parameters, allowing stored XSS for authenticated administrators. Public exploitation details are n...
WordPress Plugin Blocks Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...