PT-2022-27715 · Shoplazza · Shoplazza Lifestyle

Name of the Vulnerable Software and Affected Versions: Shoplazza LifeStyle version 1.1 Description: A vulnerability was found in the Product Carousel Handler component, affecting an unknown part of the file /admin/api/theme-edit/. The manipulation of the Heading/Description argument leads to...

CVE-2022-4600

Shoplazza LifeStyle 1.1 is affected by CVE-2022-4600. The Product Carousel Handler’s /admin/api/theme-edit/ endpoint improperly handles the Heading/Description parameter, enabling cross-site scripting. The attack can be initiated remotely and is documented across multiple sources (NVD/Red Hat/CVE...

CVE-2022-4600: Improper Neutralization

A vulnerability was found in Shoplazza LifeStyle 1.1. It has been classified as problematic. This affects an unknown part of the file /admin/api/theme-edit/ of the component Product Carousel Handler. The manipulation of the argument Heading/Description leads to cross site scripting. It is possibl...

PT-2026-48634

Name of the Vulnerable Software and Affected Versions YITH WooCommerce Product Slider Carousel versions prior to 1.16.0 Description A Cross-Site Request Forgery CSRF flaw exists in the software. CSRF is a type of attack that tricks a victim into submitting a malicious request. It inherits the...

Wordpress plugin Owl Carousel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Malicious code in carousel-enabledx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 129fdd32c79e17d2c02948ef3b4661dc902f2ed62dbddb80d6c47fa3be3fc238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stories-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4af0e016dcc3c2be20f47532541a36646d620f66cf88b19318b13996b442bff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6318 Malicious code in stories-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4af0e016dcc3c2be20f47532541a36646d620f66cf88b19318b13996b442bff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in carousel-enabled (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14078087d396c3df10838c8856bf2dc76fbb271430585b0fe8a804a0a9b38a08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1829 Malicious code in carousel-enabled (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14078087d396c3df10838c8856bf2dc76fbb271430585b0fe8a804a0a9b38a08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1266

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2022-13760

Name of the Vulnerable Software and Affected Versions The Post Grid, Slider & Carousel Ultimate WordPress plugin versions prior to 1.5.0 Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of the Header Title, even...

CVE-2022-1266: Improper Neutralization of Input During Web Page Generation

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress plugin Post Grid, Slider & Carousel Ultimate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Post Grid,Slider...

CVE-2022-1336

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

CVE-2022-1336

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

CVE-2022-1336

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

Cross site scripting

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

CVE-2022-1336 Carousel CK <= 1.1.0 - Admin+ Stored Cross-Site Scripting

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

CVE-2022-1336

CVE-2022-1336 affects the Carousel CK WordPress plugin (versions ≤ 1.1.0). The issue is due to unsanitized/uncleaned Slide descriptions, allowing stored Cross-Site Scripting (XSS) when unfiltered_html is disallowed. Exploitation requires authenticated access (high-privilege users such as admin) a...