10 matches found
EUVD-2024-35473
Malicious code in bioql PyPI...
CVE-2024-35715
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in peregrinethemes Bloglo, peregrinethemes Blogvi allows Stored XSS.This issue affects Bloglo: from n/a through 1.1.3; Blogvi: from n/a through 1.0.5...
CVE-2024-35715
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in peregrinethemes Bloglo, peregrinethemes Blogvi allows Stored XSS.This issue affects Bloglo: from n/a through 1.1.3; Blogvi: from n/a through 1.0.5...
CVE-2024-35715
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in peregrinethemes Bloglo, peregrinethemes Blogvi allows Stored XSS.This issue affects Bloglo: from n/a through 1.1.3; Blogvi: from n/a through 1.0.5...
CVE-2024-35715
CVE-2024-35715: Stored XSS in Bloglo and Blogvi WordPress themes/plugins due to improper input neutralization during page generation. Affected: Bloglo up to 1.1.3; Blogvi up to 1.0.5. Root cause as described; no explicit exploitation details provided in the available documents. Patch/mitigation s...
CVE-2024-35715 WordPress Bloglo and Blogvi themes affected by Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in peregrinethemes Bloglo, peregrinethemes Blogvi allows Stored XSS.This issue affects Bloglo: from n/a through 1.1.3; Blogvi: from n/a through 1.0.5...
PT-2024-26665 · Peregrinethemes · Bloglo +1
Name of the Vulnerable Software and Affected Versions: peregrinethemes Bloglo versions 1.1.3 and earlier peregrinethemes Blogvi versions 1.0.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This...
WordPress plugin Bloglo Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Bloglo theme <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Bloglo versions = 1.1.3...
WordPress Bloglo Theme <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)
Software Bloglo Type Theme Vulnerable versions = 1.1.3 Fixed in 1.1.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35715 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 469488b623d7 Credits stealthcopter Required privilege Contributor...