362 matches found
WordPress Navigation menu as Dropdown Widget Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
Software Navigation menu as Dropdown Widget Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32126 Patch priority Low CVSS severity Low 5.9 Developer Jeroen Peters PSID 5c32e593787a Credits Joshua Chan Required...
WordPress Country State City Dropdown CF7 Plugin <= 2.7.1 is vulnerable to Broken Access Control
Software Country State City Dropdown CF7 Type Plugin Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3520 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bfcec957c70d Credits Lucio Sá...
CVE-2024-29910
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alordiel Dropdown Multisite selector allows Stored XSS.This issue affects Dropdown Multisite selector: from n/a through 0.9.2...
CVE-2024-29910 WordPress Dropdown Multisite selector plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alordiel Dropdown Multisite selector allows Stored XSS.This issue affects Dropdown Multisite selector: from n/a through 0.9.2...
CVE-2024-29910
CVE-2024-29910 refers to a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin “Dropdown Multisite selector.” The connected data indicate this affects versions up to 0.9.2 (listed as <= 0.9.2) with the issue described as Stored XSS via shortcode. The vulnerability is categorized as ...
CVE-2024-29910 WordPress Dropdown Multisite selector plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alordiel Dropdown Multisite selector allows Stored XSS.This issue affects Dropdown Multisite selector: from n/a through 0.9.2...
WordPress Dropdown Multisite selector Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS)
Software Dropdown Multisite selector Type Plugin Vulnerable versions = 0.9.2 Fixed in 0.9.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29910 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 070110679b87 Credits LVT-tholv2k Required...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Fullscreen Notification Obscuring
Firefox and Thunderbird are vulnerable to Fullscreen Notification Obscuring. The vulnerability is due to a website being able to obscure the fullscreen notification by using a dropdown select input element. This could lead to user confusion and possible spoofing attacks in Firefox and Thunderbird...
CVE-2024-1548
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...