CVE-2024-24398

Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function...

WordPress plugin RSS Aggregator by Feedzy Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-20381

Name of the Vulnerable Software and Affected Versions Stimulsoft Dashboard.JS versions prior to 2024.1.2 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted payload to the "search bar component". This enables the attacker to perform unauthoriz...

Secure non-human identities with Wiz’s newest CIEM dashboard

Gain visibility into non-human identities in your environment and protect against risky service accounts with the new Non-Human Identities Dashboard...

Grafana Cross-site Scripting (XSS)

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

GHSA-V5GQ-QVJQ-8P53 Grafana Cross-site Scripting (XSS)

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2024-22290

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

CVE-2024-22290

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

CVE-2024-22290 WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

CVE-2024-22290 WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

CVE-2024-22290

CVE-2024-22290 (WordPress Custom Dashboard Widgets) The vulnerability affects the Custom Dashboard Widgets plugin for WordPress, versions up to and including 1.3.1. It is described as a Cross-Site Request Forgery (CSRF) vulnerability that can lead to Cross-Site Scripting (XSS) via cdw_DashboardWi...

PT-2024-19311 · Unitone · Unitone Custom Dashboard Widgets

Name of the Vulnerable Software and Affected Versions: AboZain, O7abeeb, UnitOne Custom Dashboard Widgets versions 1.3.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in Custom Dashboard Widgets. Recommendations: For...

WordPress plugin Custom Dashboard Widgets Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Grafana XSS via adding a link in General feature

Grafana 5.3.1 has XSS via a link on the "Dashboard All Panels General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

Grafana XSS in Dashboard Text Panel

Grafana 5.3.1 has XSS via the "Dashboard Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

GHSA-CMQ2-J8V8-2Q44 Grafana XSS in Dashboard Text Panel

Grafana 5.3.1 has XSS via the "Dashboard Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

CVE-2023-51843

react-dashboard 1.4.0 is vulnerable to Cross Site Scripting XSS as httpOnly is not set...

React Dashboard Security Vulnerability

React Dashboard is a template. A security vulnerability exists in React Dashboard version 1.4.0, which stems from unset httpOnly and is vulnerable to cross-site scripting attacks...

CVE-2023-51843

Summary: CVE-2023-51843 affects the React Dashboard package. Vulnerability: Cross Site Scripting (XSS) arising because the httpOnly flag is not set on cookies. Affected software: react-dashboard 1.4.0. Root cause (as stated): httpOnly is not set, enabling potential exposure of cookie data. Impact...