CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409 Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site Scripting

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin (versions up to 1.0.0) contains an authentication-restricted stored Cross-Site Scripting (XSS) vulnerability caused by improper escaping of chart data labels. This allows high-privilege users to execute XSS, even when unfiltered_html is disallowed; exploitation re...

WordPress plugin Rough Chart 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2022-16459 · WordPress · Rough Chart Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Rough Chart WordPress plugin versions through 1.0.0 Description: The issue concerns the Rough Chart WordPress plugin, which does not properly escape chart data labels. This could allow high-privilege users to perform Cross-Site Scripting...

Reflected XSS on conversion filter function

Description Fava v1.22 have a conversion filter function on income statement dashboard which allow user to perform XSS due to improper validation on filter conversion. Proof of Concept 1 Navigate to Fava demo instance https://fava.pythonanywhere.com/example-beancount-file/incomestatement/. 2 Filt...

WordPress Rough Chart plugin <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Siddhant Suresh Ughade in WordPress Rough Chart plugin versions = 1.0.0. Solution Deactivate and delete. This plugin has been closed as of July 14, 2022 and is not available for download. This closure is temporary, pending ...

MAL-2022-6734 Malicious code in ucs-multi-series-line-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae50640818d0dd907fe7a22c27ef0627f0c3f001c66d489e08a4a0c8702a9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ucs-multi-series-line-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae50640818d0dd907fe7a22c27ef0627f0c3f001c66d489e08a4a0c8702a9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ucs-availability-status-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bc5d01482d28fbd03e19503a03721a4fab429f0d86a0f2fcf2d17b4e6553aa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6730 Malicious code in ucs-availability-status-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bc5d01482d28fbd03e19503a03721a4fab429f0d86a0f2fcf2d17b4e6553aa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apex-chart-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d32cd53667dc0ab701e23650c529fd397e831ec601da7f90d3da95f906ae292b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1035 Malicious code in apex-chart-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d32cd53667dc0ab701e23650c529fd397e831ec601da7f90d3da95f906ae292b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfdc-empty-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc2d8b9c06b3b6ca1875897ebcf993a20d30c3d0c480503ac33251c1cc93aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfdc-abstract-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4fb0d0033264a928716326514774becd436c82d3a722325c147978b06c48fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6050 Malicious code in sfdc-empty-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc2d8b9c06b3b6ca1875897ebcf993a20d30c3d0c480503ac33251c1cc93aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6044 Malicious code in sfdc-abstract-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4fb0d0033264a928716326514774becd436c82d3a722325c147978b06c48fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfdc-bar-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf33d2fd517bceff3b5184b4d4e9e903dd86c896c104a5566bee2dbcf0ab8fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...