1508 matches found
WordPress Plugin CPT Bootstrap Carousel Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-14463 · Unknown · Cpt Bootstrap Carousel
Name of the Vulnerable Software and Affected Versions: CPT Bootstrap Carousel versions 1.12 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...
CVE-2023-52196: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phil Ewels CPT Bootstrap Carousel allows Reflected XSS.This issue affects CPT Bootstrap Carousel: from n/a through 1.12...
WordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)
Software CPT Bootstrap Carousel Type Plugin Vulnerable versions = 1.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-52196 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0ea2a573201b Credits Dimas Maulana Required...
JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2024-0021733)
JFinalCMS is a content management system. JFinalCMS version 5.0.0 cross-site scripting vulnerability, the vulnerability stems from the carousel image editing of user-supplied data lack of effective filtering and escaping, the vulnerability can be exploited by an attacker by injecting a...
Cross-site Scripting in JFinalcms
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
GHSA-3HF6-F8CH-5869 Cross-site Scripting in JFinalcms
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
CVE-2023-50100
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
CVE-2023-50100
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
Cross site scripting
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
JFinal 跨站脚本漏洞
JFinalCMS is a content management system. JFinalCMS version 5.0.0 cross-site scripting vulnerability, the vulnerability stems from the carousel image editing of user-supplied data lack of effective filtering and escaping, the vulnerability can be exploited by an attacker by injecting a...
CVE-2023-50100
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
CVE-2023-50100
CVE-2023-50100 affects JFinalcms 5.0.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the carousel image editing feature, caused by insufficient filtering/escaping of user-supplied data. Impact: an attacker can inject and execute arbitrary scripts in the victim’s browser. Exp...
CVE-2023-50100
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
PT-2023-31472 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS via carousel image editing. This means that an attacker could potentially inject malicious scripts into the website, which would then be executed by the...
CVE-2023-50100: Improper Neutralization of Input During Web Page Generation
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
Carousel Slider < 2.2.3 - Missing Authorization
Description The Carousel Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleoptinoptout function hooked via 'admininit' in versions up to, and including, 2.2.2. This makes it possible for unauthenticated attackers to opt i...
Thumbnail carousel slider < 1.0.1 - Cross-Site Request Forgery to Mass Slider Deletion
Description The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders in bulk via a forged request...