CVE-2024-25253

Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module...

CVE-2024-25253

Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module...

CVE-2024-25253

IObit Driver Booster v10.6 is vulnerable to a buffer overflow triggered via the Host parameter located under the Customize proxy module (also referred to as the Custom Agent module). The vulnerability stems from a buffer copy without checking the size of the input . While specific exploitation de...

CVE-2024-10837

The SysBasics Customize My Account for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 2.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2024-10837

CVE-2024-10837 is a Reflected Cross‑Site Scripting vulnerability in the SysBasics Customize My Account for WooCommerce plugin for WordPress. It affects all versions up to 2.7.29 and is exploitable by unauthenticated attackers who lure a user into clicking a crafted link containing the vulnerable ...

CVE-2024-10837 SysBasics Customize My Account for WooCommerce <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter

The SysBasics Customize My Account for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 2.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2024-10837 SysBasics Customize My Account for WooCommerce <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter

The SysBasics Customize My Account for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 2.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

WordPress SysBasics Customize My Account for WooCommerce plugin <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter vulnerability

Reflected Cross-Site Scripting via tab Parameter vulnerability discovered by vgo0 in WordPress Plugin Customize My Account for WooCommerce versions = 2.7.29...

Versa Director Dangerous File Type Upload Vulnerability

The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface. The “Change Favicon” Favorite Icon enables the upload of a...

WordPress plugin Customify Site Library 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in th...

CVE-2024-32517: Missing Authorization

Missing Authorization vulnerability in WooCommerce & WordPress Tutorials Custom Thank You Page Customize For WooCommerce by Binary Carpenter.This issue affects Custom Thank You Page Customize For WooCommerce by Binary Carpenter: from n/a through 1.4.12...

CVE-2023-51369

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

CVE-2023-51369

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

CVE-2023-51369 WordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

CVE-2023-51369

CVE-2023-51369 describes a Cross-Site Request Forgery (CSRF) vulnerability in WordPress plugin SysBasics Customize My Account for WooCommerce, affecting versions n/a through 1.8.3. Public sources (RH and CN/ENISA references) confirm the issue is CSRF, with remediation guidance recommending upgrad...

PT-2024-14096 · Woocommerce · Customize My Account For Woocommerce

Name of the Vulnerable Software and Affected Versions: Customize My Account for WooCommerce versions 1.8.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Customize My Account for WooCommerce. This type of vulnerability allows an attacker to trick a user...

WordPress Plugin Customize My Account for WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

How to Change Veeam Service Provider Console UI Language

Veeam Service Provider Console 9.1 Integrated Feature Starting with Veeam Service Provider Console 9.1, the ability to assign and customize the Portal Language is now an integrated feature able to be configured via the Web UI: Veeam Service Provider Console 9.1 - Configuring Portal Language Artic...

CVE-2023-50175

Stored cross-site scripting vulnerability exists in the App Settings /admin/app page, the Markdown Settings /admin/markdown page, and the Customize /admin/customize page of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser o...

PT-2023-31487 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v6.0.0 Description: A stored cross-site scripting issue exists in the App Settings /admin/app page, the Markdown Settings /admin/markdown page, and the Customize /admin/customize page. This could allow an arbitrary...