696 matches found
CVE-2023-44143
CVE-2023-44143 concerns the WordPress Bamboo Columns plugin, affected versions through 1.6.1. The issue is a Stored Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization and insufficient output escaping during web page generation. The exposure can allow attackers with a...
CVE-2023-44143 WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns allows Stored XSS.This issue affects Bamboo Columns: from n/a through 1.6.1...
PT-2023-29127 · Unknown · Bamboo Columns
Name of the Vulnerable Software and Affected Versions: Bamboo Columns versions through 1.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious script...
WordPress Plugin Bamboo Columns Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
Free and Open Source Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...
Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...
CVE-2023-47812
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...
CVE-2023-47812
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...
CVE-2023-47812 WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...
CVE-2023-47812
CVE-2023-47812 affects Bamboo Columns (WordPress) ≤ 1.6.1. It is a Stored XSS vulnerability triggered by input during web page generation, requiring authenticated Contributor+ access. Desktop/public impact: injection of scripts on pages viewed by users. Remediation status in the provided docs is ...
CVE-2023-43887
Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the numtilecolumns and numtilerow parameters in the function picparameterset::dump...
DEBIAN-CVE-2023-43887
Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the numtilecolumns and numtilerow parameters in the function picparameterset::dump...
CVE-2023-5708
The WP Post Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'column' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
Cross site scripting
The WP Post Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'column' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2023-5708 WP Post Columns <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Post Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'column' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2023-5708
CVE-2023-5708 affects WP Post Columns plugin for WordPress (
WordPress Plugin Bamboo Columns Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2023-8875 · Libde265 +4 · Libde265 +4
Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.12 Description: The issue is related to a buffer overflow in the pic parameter set::dump function of the h.265 Libde265 video codec, specifically through the num tile columns and num tile row parameters. This could allow ...
PT-2023-32281 · WordPress · Wp Post Columns
Name of the Vulnerable Software and Affected Versions: WP Post Columns plugin for WordPress versions up to, and including, 2.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'column' shortcode due to insufficient input sanitization and output escaping on...