PT-2024-4076 · Helm +2 · Helm +2

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.14.1 Description: The issue is related to the Helm client or SDK saving a chart outside its expected directory based on changes in the relative path within the Chart.yaml file. This occurs when the chart's name includ...

CVE-2023-47526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chart Builder Team Chartify – WordPress Chart Plugin allows Stored XSS.This issue affects Chartify – WordPress Chart Plugin: from n/a through 2.0.6...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chart Builder Team Chartify – WordPress Chart Plugin allows Stored XSS.This issue affects Chartify – WordPress Chart Plugin: from n/a through 2.0.6...

CVE-2023-47526

CVE-2023-47526 is a stored XSS vulnerability in the WordPress plugin Chartify (Chart Builder) vulnerable in versions = 2.0.7 or apply vendor-provided patches. If upgrading is not feasible, monitor for official advisories and consider mitigating through plugin removal or disabling affected feature...

CVE-2023-39611

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

Information disclosure

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

CVE-2023-39611

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

CVE-2023-39611

The CVE-2023-39611 entry concerns Software FX Chart FX 7 (version 7.0.4962.20829). The vulnerability allows an attacker to enumerate and read files on the local filesystem by sending crafted web requests, indicating a local file disclosure issue in the web-facing functionality. The root cause and...

CVE-2023-39611

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

Software FX Chart FX Security Vulnerability

Software FX Chart FX is a data visualization library from Software FX that allows developers to create a variety of charts. A security vulnerability exists in Software FX Chart FX version 7 7.0.4962.20829, which originates from a vulnerability that allows an attacker to enumerate and read files o...

PT-2024-12817 · Softwarex · Software Fx Chart Fx 7

Name of the Vulnerable Software and Affected Versions: Software FX Chart FX 7 version 7.0.4962.20829 Description: The issue allows attackers to enumerate and read files from the local filesystem by sending crafted web requests. Recommendations: For Software FX Chart FX 7 version 7.0.4962.20829,...

CVE-2023-49734 Apache Superset: Privilege Escalation Vulnerability

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2...

CVE-2023-49734

Apache Superset is affected by an privilege-escalation vulnerability (CVE-2023-49734) where an authenticated Gamma user can create a dashboard, add charts, and automatically become an owner of those charts, gaining write permissions. Affected versions include the prior 2.1.x line (before 2.1.2) a...

CVE-2023-48778

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

CVE-2023-48778

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

CVE-2023-48778 WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

CVE-2023-48778 WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

CVE-2023-48778

CVE-2023-48778 is a CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce affecting versions up to 1.1.5. The issue is fixed in version 1.1.6. No exploitation details are provided in the connected documents; remediation is to update to 1.1.6 or later.

WordPress Plugin Product Size Chart For WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-30957 · Villatheme · Villatheme Product Size Chart For Woocommerce

Name of the Vulnerable Software and Affected Versions: VillaTheme Product Size Chart For WooCommerce versions 1.1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...