CVE-2024-9116

CVE-2024-9116 concerns the Monkee-Boy Essentials WordPress plugin. The connected sources confirm a stored XSS via SVG file uploads in all versions up to 1.1, caused by insufficient input sanitization and output escaping. The vulnerability requires authenticated access at Author level or higher, e...

CVE-2024-9116: Improper Neutralization of Input During Web Page Generation

The Monkee-Boy Essentials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

WordPress plugin Monkee-Boy Essentials 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Monkee-Boy Essentials plugin <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Monkee-Boy Essentials versions = 1.1...

WordPress Monkee-Boy Essentials Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Monkee-Boy Essentials Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9116 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f884d81aed76 Credits Francesco Carlucci...

Malicious code in elevayta_extra_boy_pro_v4_91d_vst_amplify_kj74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75ec474bc1a811f869357e9990b24e7c4898666690f73b050a8cd553bd91f9b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

epsi-formations.pro Cross Site Scripting vulnerability OBB-3918229

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

news.ma-solution-eco.com Cross Site Scripting vulnerability OBB-3881195

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AI in Healthcare: ChatGPT Helps Boy Get Diagnosis After Doctors Fail

By Waqas Artificial intelligence has the potential to revolutionize healthcare, and it is already making remarkable strides. This is a post from HackRead.com Read the original post: AI in Healthcare: ChatGPT Helps Boy Get Diagnosis After Doctors Fail...

CVE-2012-10014

A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress. Affected is the function backendlocalizationadminsettings/backendlocalizationsavesetting/backendlocalizationloginform/localizebackend of the file backendlocalization.php. The...

Cross site scripting

A vulnerability was found in Kau-Boy Backend Localization Plugin up to 1.6.1 on WordPress. It has been rated as problematic. This issue affects some unknown processing of the file backendlocalization.php. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2012-10014 Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scripting

A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress. Affected is the function backendlocalizationadminsettings/backendlocalizationsavesetting/backendlocalizationloginform/localizebackend of the file backendlocalization.php. The...

CVE-2012-10014 Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scripting

A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress. Affected is the function backendlocalizationadminsettings/backendlocalizationsavesetting/backendlocalizationloginform/localizebackend of the file backendlocalization.php. The...

CVE-2012-10014

CVE-2012-10014 affects Kau-Boy Backend Localization Plugin for WordPress (version 2.0). The vulnerability resides in backend_localization.php (functions backend_localization_admin_settings, backend_localization_save_setting, backend_localization_login_form, localize_backend) and enables cross-sit...

CVE-2012-10013

CVE-2012-10013 affects the WordPress plugin “Kau-Boy Backend Localization Plugin” up to version 1.6.1. The vulnerability lies in the file backend_localization.php where input/processing leads to cross-site scripting (XSS) . It can be exploited remotely over the network. Remediation provided in th...

CVE-2012-10014: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress. Affected is the function backendlocalizationadminsettings/backendlocalizationsavesetting/backendlocalizationloginform/localizebackend of the file backendlocalization.php. The...

CVE-2012-10013: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kau-Boy Backend Localization Plugin up to 1.6.1 on WordPress. It has been rated as problematic. This issue affects some unknown processing of the file backendlocalization.php. The manipulation leads to cross site scripting. The attack may be initiated remotely...

PT-2023-9951 · WordPress · Kau-Boy Backend Localization Plugin

Name of the Vulnerable Software and Affected Versions: Kau-Boy Backend Localization Plugin version 2.0 Description: A problematic vulnerability has been found in the Kau-Boy Backend Localization Plugin on WordPress, affecting the function backend localization admin settings/backend localization...

CVE-2022-3216

A vulnerability has been found in Nintendo Game Boy Color and classified as problematic. This vulnerability affects unknown code of the component Mobile Adapter GB. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and...

Memory corruption

A vulnerability has been found in Nintendo Game Boy Color and classified as problematic. This vulnerability affects unknown code of the component Mobile Adapter GB. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and...