bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

CVE-2022-4475

The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4475

The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4475 Collapse-O-Matic < 1.8.3 - Contributor+ Stored XSS

The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4475

CVE-2022-4475 affects the Collapse-O-Matic WordPress plugin, versions prior to 1.8.3. The vulnerability arises from not validating/escaping certain shortcode attributes before rendering, enabling a user with as little as a contributor role to perform a Stored XSS against higher-privilege users (e...

WordPress plugin Collapse-O-Matic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

GSD-2023-1000285 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths

mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.227 by commit...

GSD-2023-1000151 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths

mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000056 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths

mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

PT-2023-33133 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to the invocation of MMU notifiers in shmem/file collapse paths in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2023-33228 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to the invocation of MMU notifiers in shmem/file collapse paths in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

WordPress Show-Hide / Collapse-Expand Plugin <= 1.2.5 is vulnerable to Broken Authentication

Software Show-Hide / Collapse-Expand Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.3.0 OWASP Top 10 A5: Broken Access Control Classification Broken Authentication CVE N/A Patch priority High CVSS severity High 5.4 Developer Claim ownership PSID 11f0fb541e9a Credits N/A Required privilege...

WordPress Show-Hide / Collapse-Expand Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Show-Hide / Collapse-Expand Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.3.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4829 Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID a608bae568e8 Credits István...

GSD-2022-1006502 smb3: fix temporary data corruption in collapse range

smb3: fix temporary data corruption in collapse range This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

PT-2024-11771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to temporary data corruption in the collapse range of the smb3 module. The collapse range does not discard the affected cached region, which can risk temporarily...

Malicious code in iron-collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aebaf3bae134e4d6d913d70ce98d7403570556cb7b9f9ce0749037e61bddf5eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3957 Malicious code in iron-collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aebaf3bae134e4d6d913d70ce98d7403570556cb7b9f9ce0749037e61bddf5eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6840 Malicious code in usaa-expand-collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142c29db83894f2e0f732ea8c9ce49c85797b4fe9ba3be863ad149bf299883cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-expand-collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142c29db83894f2e0f732ea8c9ce49c85797b4fe9ba3be863ad149bf299883cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...