509 matches found
CVE-2023-32130 WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Daniel Powney Multi Rating plugin = 5.0.6 versions...
CVE-2023-32130: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Daniel Powney Multi Rating plugin = 5.0.6 versions...
PT-2023-23635
Name of the Vulnerable Software and Affected Versions Daniel Powney Multi Rating plugin versions 5.0.6 and earlier Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations For Daniel Powney...
CVE-2023-25467
Cross-Site Request Forgery CSRF vulnerability in Daniel Mores, A. Huizinga Resize at Upload Plus plugin = 1.3 versions...
CVE-2023-25467
Cross-Site Request Forgery CSRF vulnerability in Daniel Mores, A. Huizinga Resize at Upload Plus plugin = 1.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Daniel Mores, A. Huizinga Resize at Upload Plus plugin = 1.3 versions...
CVE-2023-25467
CVE-2023-25467 concerns a CSRF vulnerability in the WordPress plugin Resize at Upload Plus, affecting versions ≤ 1.3. The root cause is a Cross-Site Request Forgery condition that can be triggered by an unauthenticated attacker, potentially compromising actions within the vulnerable plugin. Publi...
CVE-2023-25467: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Daniel Mores, A. Huizinga Resize at Upload Plus plugin = 1.3 versions...
daniel-bintener.com Cross Site Scripting vulnerability OBB-3360261
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-47433
Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...
CVE-2022-47433
Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...
CVE-2022-47433 WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...
CVE-2022-47433
CVE-2022-47433 affects the WordPress plugin Daniel Powney Multi Rating. Connected sources (Patchstack) indicate unauthenticated Cross-Site Scripting in Multi Rating versions ≤ 5.0.6, with CVSS ~7.1 (high). The initial entry lists versions ≤ 5.0.5 (unauthenticated XSS) but Patchstack expands this ...
PT-2023-15309 · Unknown · Daniel Powney Multi Rating
Name of the Vulnerable Software and Affected Versions: Daniel Powney Multi Rating plugin versions = 5.0.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...
CVE-2022-47433: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...
CVE-2022-47443
Cross-Site Request Forgery CSRF vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...
CVE-2022-47443
CVE-2022-47443 pertains to the WordPress Multi Rating plugin (Daniel Powney)
CVE-2022-47443 WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...