Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in YYDevelopment Back To The Top Button plugin = 2.1.5 versions...

CVE-2023-41733

CVE-2023-41733 affects the WordPress plugin YYDevelopment Back To The Top Button (versions 2.1.5, e.g., 2.1.7 or newer) is the recommended mitigation. If upgrading is not feasible, monitor for updates and consider compensating controls until a patch can be applied.

WordPress Timely Booking Button Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Timely Booking Button Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-44987 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7f597f7217c8 Credits yuyudhn Required...

PT-2023-28351 · Mastodon · Mastodon

Name of the Vulnerable Software and Affected Versions: Mastodon versions prior to 4.0.10 Mastodon versions prior to 4.2.8 Mastodon versions prior to 4.2.0-rc2 Description: Mastodon is a free, open-source social network server based on ActivityPub. In certain conditions, attackers can abuse the...

PT-2023-5466 · Red Hat · 3Scale Admin Portal

Name of the Vulnerable Software and Affected Versions: 3Scale Admin Portal affected versions not specified Description: A flaw was found in 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the...

Add and remove accounts buttons disappeared on Citrix Workspace app for Windows

Add and Remove Accounts buttons disappeared on Citrix Workspace app for Windows...

Cacti Cross-Site Scripting Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from a cross-site scripting vulnerability that stems from the...

WordPress Back To The Top Button Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Back To The Top Button Type Plugin Vulnerable versions = 2.1.6 Fixed in 2.1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41733 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 476e426fa8a5 Credits Rio Darmawan...

CVE-2023-24401

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davidsword Mobile Call Now & Map Buttons plugin = 1.5.0 versions...

WordPress plugin mobile-call-now-map-buttons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-40735

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON Architecture flaw allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21...

CVE-2023-40735

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON Architecture flaw allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21...

Improper access control

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BUTTERFLY BUTTON PROJECT - BUTTERFLY BUTTON Architecture flaw allows loss of plausible deniability and confidentiality. This issue affects BUTTERFLY BUTTON: As of 2023-08-21...

CVE-2023-40735 Butterfly Button Project - Sensitive Information Disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON Architecture flaw allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21...

CVE-2023-40735

CVE-2023-40735 concerns an exposure of sensitive information to an unauthorized actor in the BUTTERFLY BUTTON project (Butterfly Button). The issue is described as an architecture flaw that can compromise confidentiality and plausible deniability. The CVSS 3.1 metrics (NVD and CNA sources) assign...

PT-2023-27611 · Unknown · Butterfly Button

Name of the Vulnerable Software and Affected Versions: BUTTERFLY BUTTON affected versions not specified Description: The issue is related to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability, which is caused by an architecture flaw. This flaw allows for the loss of...

Butterfly Button 安全漏洞

Butterfly Button is an application by the individual developers of TheButterflySDK who are actively involved in the fight against domestic violence. Butterfly Button suffers from a security vulnerability that stems from the presence of unauthorized behavior that can lead to the disclosure of...

CVE-2023-2254

The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup, and we consider it a low risk...

CVE-2023-2254

The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup, and we consider it a low risk...

Cross site scripting

The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup, and we consider it a low risk...