CVE-2024-31255

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts allows Reflected XSS.This issue affects ELEX WooCommerce Dynamic Pricing and Discounts: from n/a through 2.1.2...

loss of funds if there is no discount

Lines of code Vulnerability details citadelAmount is initialized to 0 by default, and then if the discount is greater than zero, it is set to the amount out. But if the discount is 0, it is not set to the amount out and citadelAmount stays 0 and then divided by assetDecimalsNormalizationValue, bu...

DISCOUNT Denial of Service Vulnerability (CNVD-2018-10852)

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'isfootnote' function in the markdown.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap-based...