CVE-2023-25028

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in chuyencode CC Custom Taxonomy plugin = 1.0.1 versions...

CVE-2023-25028

CVE-2023-25028 affects the WordPress plugin CC Custom Taxonomy (versions

CVE-2023-25028 WordPress CC Custom Taxonomy Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in chuyencode CC Custom Taxonomy plugin = 1.0.1 versions...

CVE-2023-25028 WordPress CC Custom Taxonomy Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in chuyencode CC Custom Taxonomy plugin = 1.0.1 versions...

WordPress plugin CC Custom Taxonomy 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

CVE-2023-25028: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in chuyencode CC Custom Taxonomy plugin = 1.0.1 versions...

PT-2023-24579

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.0 through 7.4.0 Liferay DXP 7.3 before update 14 Description A cross-site scripting XSS issue exists in the App Builder module's custom object details page, allowing remote attackers to inject arbitrary web script o...

North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

The North Korean advanced persistent threat APT group known as Kimsuky has been observed using a piece of custom malware called RandomQuery as part of a reconnaissance and information exfiltration operation. "Lately, Kimsuky has been consistently distributing custom malware as part of...

Ultimate Dashboard < 3.7.6 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to "Ultimate Dashboard - Settings - General"...

GHSA-J8R2-6X86-Q33Q Unintended leak of Proxy-Authorization header in requests

Impact Since Requests v2.3.0, Requests has been vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization header to...

CVE-2023-25448

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

CVE-2023-25448

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

CVE-2023-25448 WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

A proof-of-concept PoC has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784, impacts KeePass versions 2.x for Windows, Linux,...

WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Custom Post Type Generator Type Plugin Vulnerable versions = 2.4.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-33329 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 38a835231f46 Credits thiennv Requir...

WordPress plugin Archivist – Custom Archive Templates 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress WIP Custom Login Plugin <= 1.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software WIP Custom Login Type Plugin Vulnerable versions = 1.2.9 Fixed in 1.3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-33313 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0446832940c9 Credits LEE SE HYOUNG...

CVE-2023-25448: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...

GLSA-202305-27 : Tinyproxy: Memory Disclosure

The remote host is affected by the vulnerability described in GLSA-202305-27 Tinyproxy: Memory Disclosure - Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in...