3659 matches found
CVE-2024-25906
CVE-2024-25906 affects the WordPress plugin Comments Like Dislike (WP Happy Coders) up to version 1.2.2 . The issue is an authentication bypass via spoofing, specifically an IP restriction bypass that can allow functionality bypass/escalation of access as described in Patchstack and Red Hat/NVD r...
CVE-2024-25906 WordPress Comments Like Dislike plugin <= 1.2.2 - IP Restriction Bypass Vulnerability vulnerability
Authentication Bypass by Spoofing vulnerability in WP Happy Coders Comments Like Dislike allows Functionality Bypass.This issue affects Comments Like Dislike: from n/a through 1.2.2...
CVE-2024-25906 WordPress Comments Like Dislike plugin <= 1.2.2 - IP Restriction Bypass Vulnerability vulnerability
Authentication Bypass by Spoofing vulnerability in WP Happy Coders Comments Like Dislike allows Functionality Bypass.This issue affects Comments Like Dislike: from n/a through 1.2.2...
PT-2024-21197 · WordPress · Wp Happy Coders Comments Like Dislike
Name of the Vulnerable Software and Affected Versions: WP Happy Coders Comments Like Dislike versions 1.2.2 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, which allows functionality bypass. Recommendations: For versions 1.2.2 and earlier, upda...
WordPress plugin Comments Evolved for WordPress 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. Cross-site scripting vulnerability exists in WordPress...
RLSA-2024:2562 Important: golang security update
The golang packages provide the Go programming language compiler. Security Fixes: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 golang: net/http: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 golang: net/http/cookiejar: incorrect...
PT-2024-5501 · Umi Cms · Umi Cms
Name of the Vulnerable Software and Affected Versions: UMI CMS affected versions not specified Description: The issue is related to the lack of protection against SQL query structure exploitation in UMI CMS, a multi-site content management system. This could allow a remote attacker to execute...
CVE-2024-34420 WordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in talspotim Comments Evolved for WordPress allows Stored XSS.This issue affects Comments Evolved for WordPress: from n/a through 1.6.3...
CVE-2024-34420
CVE-2024-34420 is a stored XSS in the WordPress plugin Comments Evolved (gplus-comments) affecting versions n/a through 1.6.3. The Red Hat and CVE descriptions confirm improper input neutralization in web page generation leading to stored XSS. The Wordfence entry notes this vulnerability as authe...
CVE-2024-34420 WordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in talspotim Comments Evolved for WordPress allows Stored XSS.This issue affects Comments Evolved for WordPress: from n/a through 1.6.3...
PT-2024-25873 · WordPress · Comments Evolved
Name of the Vulnerable Software and Affected Versions: Comments Evolved for WordPress versions 1.6.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendation...
PT-2024-40768 · Oracle · Java.Base
Name of the Vulnerable Software and Affected Versions: com.github.javaparser affected versions not specified Description: The issue is related to a security exception. Technical details about the crash include the insertComments function in com.github.javaparser.CommentsInserter, as well as the...
WordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Comments Evolved for WordPress versions = 1.6.3...
PT-2024-25933 · Drupal · Drupal Wiki
Name of the Vulnerable Software and Affected Versions: Drupal Wiki versions prior to 8.31.1 Description: The issue allows for XSS attacks via comments, captions, and image titles of a Wiki page. Recommendations: For versions prior to 8.31.1, update to version 8.31.1 or later to resolve the issue...
WordPress Comments Evolved for WordPress Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)
Software Comments Evolved for WordPress Type Plugin Vulnerable versions = 1.6.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34420 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ad6d473680e3 Credits Sharanabasappa Required...
golang: net/mail: comments in display names are incorrectly handled
A flaw was found in Go's net/mail standard library package. The ParseAddressList function incorrectly handles comments text within parentheses within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions made by programs using...
golang: html/template: improper handling of HTML-like comments within script contexts
A flaw was found in Golang. The html/template package did not properly handle HMTL-like "" comment tokens, nor hashbang "!" comment tokens, in contexts. This issue may cause the template parser to improperly interpret the contents of contexts, causing actions to be improperly escaped...
Cross-site Scripting (XSS)
knowledge-repo is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper user input validation in the post comments functionality. This allows an attacker to inject arbitrary web scripts or HTML content into the application, potentially leading to cross-site scripting XSS...
WordPress Better Comments plugin < 1.5.6 - Subscriber+ Stored XSS vulnerability
Subscriber+ Stored XSS vulnerability discovered by Nicolo in WordPress Plugin Better Comments versions 1.5.6...