CVE-2025-49290

CVE-2025-49290 describes a Reflected Cross-Site Scripting flaw in the WordPress plugin Off-Canvas Sidebars & Menus (Slidebars)

PT-2025-27106 · Unknown · Off-Canvas Sidebars & Menus

Name of the Vulnerable Software and Affected Versions: Off-Canvas Sidebars & Menus Slidebars versions 0.5.8.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations:...

WordPress plugin Off-Canvas Sidebars & Menus (Slidebars) 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

Astra Linux – Vulnerability in Firefox

Certain canvas operations might have led to memory corruption. This vulnerability has been fixed in Firefox 139.0.4...

CVE-2025-49709

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

SUSE CVE-2025-49709

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-49709

Certain canvas operations could have lead to memory corruption. This vulnerability affects Firefox 139.0.4...

CVE-2025-49709

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-49709

Certain canvas operations could have lead to memory corruption. This vulnerability affects Firefox 139.0.4...

UBUNTU-CVE-2025-49709

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-49709

The CVE-2025-49709 entry affects Mozilla Firefox versions earlier than 139.0.4. Affected component/issue: certain canvas operations can lead to memory corruption (root cause is stated as memory corruption from canvas processing). Impact is described as high across confidentiality, integrity, and ...

CVE-2025-49709 Memory corruption in canvas surfaces

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-49709 Memory corruption in canvas surfaces

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-49709

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer error vulnerability exists in Mozilla Firefox versions prior to 139.0.4, which stems from a canvas operation that may result in memory corruption...

MAL-2025-4641 Malicious code in canvas-helper-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a55b1c2c0c95b2f39df71c4e6d9dc7b34f680ad6ed6c14449d6bfdb3dfb207 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvas-helper-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a55b1c2c0c95b2f39df71c4e6d9dc7b34f680ad6ed6c14449d6bfdb3dfb207 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-29762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.1...

CVE-2023-43303

An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-27035

An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the canvas page...