99 matches found
WordPress CodeBard's Patron Button and Widgets for Patreon plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin CodeBard's Patron Button and Widgets for Patreon versions = 2.2.0...
WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
Software CodeBard's Patron Button and Widgets for Patreon Type Plugin Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33928 Patch priority Medium CVSS severity Medium 7.1 Developer Codebard PSID f0b671d6d681 Credits Le Ngoc...
CVE-2023-48329
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...
CVE-2023-48329
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...
CVE-2023-48329 WordPress Fast Custom Social Share by CodeBard Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...
CVE-2023-48329
CVE-2023-48329 affects the WordPress plugin Fast Custom Social Share by CodeBard (versions ≤ 1.1.1). The issue is a Cross-Site Scripting (Stored XSS) caused by improper neutralization during web page generation. Exploitation requires administrator privileges, and the vulnerability status is curre...
WordPress Plugin Fast Custom Social Share by CodeBard Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...
PT-2023-30789 · Codebard · Codebard Fast Custom Social Share
Name of the Vulnerable Software and Affected Versions: CodeBard Fast Custom Social Share versions through 1.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...
CVE-2023-48329: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...
Fast Custom Social Share by CodeBard <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Description The Fast Custom Social Share by CodeBard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...
WordPress Fast Custom Social Share by CodeBard Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
Software Fast Custom Social Share by CodeBard Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48329 Patch priority Low CVSS severity Low 5.9 Developer Codebard PSID 238600f1202b Credits Bae Song Hyun Required...
CVE-2023-47765
Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...
CVE-2023-47765
Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...
CVE-2023-47765 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...
CVE-2023-47765
CVE-2023-47765: Cross-Site Request Forgery in CodeBard’s Patron Button and Widgets for Patreon plugin (WordPress) <= 2.1.9. Root cause: missing nonce validation enabling CSRF with unauthenticated attackers to forge actions. Affected versions:
WordPress Plugin CodeBard s Patron Button and Widgets for Patreon Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin CodeBard s...
CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Reflected XSS
Description The plugin does not sanitise and escape the cbp6tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...