3659 matches found
WordPress Plugin Ultimate Social Comments 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Ultimate Social Comments A...
WordPress Ultimate Social Comments plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Ultimate Social Comments – Email Notification & Lazy Load versions = 1.4.8...
WordPress Ultimate Social Comments – Email Notification & Lazy Load Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)
Software Ultimate Social Comments – Email Notification & Lazy Load Type Plugin Vulnerable versions = 1.4.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30555 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e11e070ddc05 Credit...
CVE-2024-29804
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team Heateor Fancy Comments WordPress allows Stored XSS.This issue affects Fancy Comments WordPress: from n/a through 1.2.14...
CVE-2024-29804
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team Heateor Fancy Comments WordPress allows Stored XSS.This issue affects Fancy Comments WordPress: from n/a through 1.2.14...
CVE-2024-29804
CVE-2024-29804 is a Stored Cross-Site Scripting (XSS) vulnerability in Fancy Comments WordPress plugin (
PT-2024-23049 · WordPress · Fancy Comments
Name of the Vulnerable Software and Affected Versions: Fancy Comments WordPress versions 1.2.14 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject malicious...
WordPress Plugin Fancy Comments WordPress 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Fancy Comments WordPress Plugin <= 1.2.14 is vulnerable to Cross Site Scripting (XSS)
Software Fancy Comments WordPress Type Plugin Vulnerable versions = 1.2.14 Fixed in 1.2.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29804 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 363425af08f9 Credits Ngô Thiên An ancorn from...
The vulnerability of the JetBrains YouTrack project management and task management software, related to bypassing authentication through spoofing, allows a malicious user to create comments from an arbitrary user.
The vulnerability of the JetBrains YouTrack project and task management software relates to the bypassing of authentication processes through phising techniques. Exploiting this vulnerability allows a malicious actor to create comments from an arbitrary user...
Authorization
The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.0. This is due to missing or incorrect capability checks on several ajax actions. This makes it possible for authenticated attackers, with subscribe...
WooCommerce < 8.4.0 - Reflected Cross-Site Scripting
Description The plugin does not properly sanitize user-input provided by the addqueryarg function when echoed back into JavaScript code context. http://vulnerable-site.tld/wp-admin/edit-comments.php?%27;alert1//...
WordPress Plugin Comments Extra Fields For Post,Pages and CPT Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Plugin Comments Extra Fields For Post,Pages and CPT Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
The vulnerability of the OTRS request processing system, related to deficiencies in the authentication process, allows a violator to add additional files to the comments of any user.
The vulnerability of the OTRS request processing system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to add additional files to the comments of any user...
pgx SQL Injection via Line Comment Creation
...
SUSE SLES12 Security Update : go1.21 (SUSE-SU-2024:0800-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0800-1 advisory. - Upgrade go to version 1.21.8 - CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookie...
[SECURITY] Fedora 40 Update: javaparser-3.25.8-3.fc40
This package contains a Java 1 to 13 Parser with AST generation and visitor support. The AST records the source code structure, javadoc and comments. It is also possible to change the AST nodes or create new ones to modify the source code...