Lucene search
+L

96 matches found

Prion
Prion
added 2024/01/31 12:16 p.m.28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

6.8CVSS6.8AI score0.00194EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/31 11:56 a.m.50 views

CVE-2024-22290 WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

7.1CVSS8.4AI score0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/31 11:56 a.m.2 views

CVE-2024-22290 WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

7.1CVSS7.4AI score0.00194EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/31 11:56 a.m.67 views

CVE-2024-22290

CVE-2024-22290 (WordPress Custom Dashboard Widgets) The vulnerability affects the Custom Dashboard Widgets plugin for WordPress, versions up to and including 1.3.1. It is described as a Cross-Site Request Forgery (CSRF) vulnerability that can lead to Cross-Site Scripting (XSS) via cdw_DashboardWi...

8.8CVSS8.4AI score0.00194EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/31 12:00 a.m.16 views

PT-2024-19311 · Unitone · Unitone Custom Dashboard Widgets

Name of the Vulnerable Software and Affected Versions: AboZain, O7abeeb, UnitOne Custom Dashboard Widgets versions 1.3.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in Custom Dashboard Widgets. Recommendations: For...

8.8CVSS8.4AI score0.00194EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/01/31 12:00 a.m.10 views

WordPress plugin Custom Dashboard Widgets Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00194EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/23 9:15 p.m.7 views

CVE-2023-52327

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328...

6.1CVSS6.2AI score0.02475EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/23 9:15 p.m.7 views

CVE-2023-52326

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...

6.1CVSS6.2AI score0.02475EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/23 9:15 p.m.11 views

CVE-2023-52328

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329...

6.1CVSS6.2AI score0.02475EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/23 9:15 p.m.22 views

CVE-2023-52327

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328...

6.1CVSS6.4AI score0.02475EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/23 9:15 p.m.9 views

CVE-2023-52329

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326...

6.1CVSS6.2AI score0.00936EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/23 9:15 p.m.22 views

Cross site scripting

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326...

5.8CVSS6.4AI score0.02475EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2024/01/23 9:15 p.m.30 views

Cross site scripting

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329...

5.8CVSS6.4AI score0.02475EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2024/01/23 9:15 p.m.22 views

Cross site scripting

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328...

5.8CVSS6.3AI score0.02475EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2024/01/23 9:15 p.m.19 views

Cross site scripting

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...

5.8CVSS6.3AI score0.02475EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/01/23 8:42 p.m.44 views

CVE-2023-52329

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326...

6.7AI score0.00936EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/01/23 8:42 p.m.17 views

CVE-2023-52329

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326...

6.6AI score0.00936EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/01/23 8:41 p.m.42 views

CVE-2023-52326

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...

6.7AI score0.02475EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/23 12:00 a.m.10 views

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. A security vulnerability exists in Trend Micro Apex Central that stems from a cross-site scripting XSS vulnerability in certain dashboard widgets. An attacker could exploit the vulnerability to execute remote code on an affected...

6.1CVSS6.5AI score0.00936EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/01/16 12:00 a.m.16 views

WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Custom Dashboard Widgets Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-22290 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 9f6ec6ec2096 Credits Dimas Maulan...

8.8CVSS6.6AI score0.00194EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder