CVE-2022-36355

CVE-2022-36355 affects the WordPress plugin Easy Org Chart (PluginlySpeaking Easy Org Chart) version

PT-2022-23325 · Pluginlyspeaking · Pluginlyspeaking Easy Org Chart

Name of the Vulnerable Software and Affected Versions: PluginlySpeaking Easy Org Chart plugin versions prior to 3.2 Description: The issue is an Authenticated Stored Cross-Site Scripting XSS vulnerability. It affects the PluginlySpeaking Easy Org Chart plugin at WordPress, where contributors or...

WordPress Easy Org Chart plugin <= 3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Easy Org Chart plugin versions = 3.1. Solution Deactivate and delete. This plugin has been closed as of July 29, 2022 and is not available for download. This closure is...

Easy Org Chart <= 3.1 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

WordPress plugin Easy Org Chart 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Easy Org Chart version 3.1 and prior versions are vulnerable to cross-site scripting. An...

Incident Reporting Regulations Summary and Chart

A growing number of regulations require organizations to report significant cybersecurity incidents. We've created a chart that summarizes 11 proposed and current cyber incident reporting regulations and breaks down their common elements, such as who must report, what cyber incidents must be...

CVE-2022-36120

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the getChartData administrative...

PT-2022-23208 · Blue Prism · Blue Prism Enterprise

Name of the Vulnerable Software and Affected Versions: Blue Prism Enterprise versions 6.0 through 7.01 Description: The issue allows an authenticated user to reverse engineer the software and circumvent access controls for the getChartData administrative function in a misconfigured environment th...

CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2409

The Rough Chart WordPress plugin (versions up to 1.0.0) contains an authentication-restricted stored Cross-Site Scripting (XSS) vulnerability caused by improper escaping of chart data labels. This allows high-privilege users to execute XSS, even when unfiltered_html is disallowed; exploitation re...

CVE-2022-2409 Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site Scripting

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress plugin Rough Chart 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2022-16459 · WordPress · Rough Chart Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Rough Chart WordPress plugin versions through 1.0.0 Description: The issue concerns the Rough Chart WordPress plugin, which does not properly escape chart data labels. This could allow high-privilege users to perform Cross-Site Scripting...

Reflected XSS on conversion filter function

Description Fava v1.22 have a conversion filter function on income statement dashboard which allow user to perform XSS due to improper validation on filter conversion. Proof of Concept 1 Navigate to Fava demo instance https://fava.pythonanywhere.com/example-beancount-file/incomestatement/. 2 Filt...

WordPress Rough Chart plugin <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Siddhant Suresh Ughade in WordPress Rough Chart plugin versions = 1.0.0. Solution Deactivate and delete. This plugin has been closed as of July 14, 2022 and is not available for download. This closure is temporary, pending ...

MAL-2022-6734 Malicious code in ucs-multi-series-line-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae50640818d0dd907fe7a22c27ef0627f0c3f001c66d489e08a4a0c8702a9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ucs-multi-series-line-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae50640818d0dd907fe7a22c27ef0627f0c3f001c66d489e08a4a0c8702a9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ucs-availability-status-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bc5d01482d28fbd03e19503a03721a4fab429f0d86a0f2fcf2d17b4e6553aa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...