WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)

Software ApplyOnline – Application Form Builder and Manager Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24391 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...

PHPJabbers Knowledge Base Builder 3.0 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

PYSEC-2023-94

Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated malicious actor with Admin privileges, could by adding a special character on the add, edit User forms trigger a database error, this error is surfaced back to this actor on t...

CVE-2023-23795

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-23795

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-27452

CVE-2023-27452 concerns the WordPress plugin Button Generator – easily Button Builder (Wow-Company) v2.3.3 and earlier, with an authenticated (admin+) Stored XSS vulnerability. Public details from NVD/Red Hat/Patchstack/patch entries identify the affected component and root cause as Stored XSS in...

CVE-2023-23795 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-23795

CVE-2023-23795 is a CSRF vulnerability in the WordPress Form Builder (Muneeb Form Builder) plugin

CVE-2023-23795 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-31213

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WPBakery Page Builder plugin = 6.13.0 versions...

CVE-2023-31213

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WPBakery Page Builder plugin = 6.13.0 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WPBakery Page Builder plugin = 6.13.0 versions...

CVE-2023-31213

CVE-2023-31213: WPBakery Page Builder (JS_CComposer) contains a stored XSS in versions

CVE-2023-31213 WordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WPBakery Page Builder plugin = 6.13.0 versions...

PT-2023-23235 · WordPress · Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: WPBakery Page Builder plugin versions prior to 6.13.0 Description: A Stored Cross-Site Scripting XSS vulnerability exists, affecting users with contributor or higher permissions. This issue allows for malicious script execution...

WordPress plugin Form Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Metform Elementor Contact Form Builder < 3.3.3 - Cross-Site Request Forgery

The plugin does not correctly validate nonces on the permalinksetup function. This can potentially enable the alteration of permalink structure via a forged request, if an administrator is tricked into clicking a deceptive link. Verification only takes place when a nonce is provided, leaving the...

WordPress Colibri Page Builder Plugin <= 1.0.227 is vulnerable to SQL Injection

Software Colibri Page Builder Type Plugin Vulnerable versions = 1.0.227 Fixed in 1.0.229 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2188 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID c1922d4070dd Credits Marco Wotschka Required privilege...