WordPress EAN for WooCommerce Plugin < 4.4.3 is vulnerable to Cross Site Scripting (XSS)

Software EAN for WooCommerce Type Plugin Vulnerable versions 4.4.3 Fixed in 4.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0062 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID efcc1edc10be Credits Lana Codes...

EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. algwceanproductimage productid='1'...

officialeancode.com Cross Site Scripting vulnerability OBB-3124279

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-20467

The CVE-2019-20467 entry concerns the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. A TELNET interface is available by default (not advertised), with two backdoor accounts (root and default) whose credentials are identical across devices. Attackers can use these accounts to obtain roo...

[ASA-202106-13] zint: arbitrary code execution

Arch Linux Security Advisory ASA-202106-13 ========================================== Severity: Medium Date : 2021-06-01 CVE-ID : CVE-2021-27799 Package : zint Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1625 Summary ======= The package zint before versio...

CVE-2019-20465

The CVE-2019-20465 issue concerns Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The connected documents confirm that the vulnerability stems from TELNET access without a password, enabling an attacker to directly control the camera’s pan/zoom/tilt functionality over the network. Affec...

CVE-2019-20464

CVE-2019-20464 affects the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The issue is that while the mobile-application streaming over UDP requires a password, other RTSP-based streaming services exposed by the device do not, allowing an unauthenticated attacker to access the video fe...

de Consumentenbond Sannce Smart HD Baby Monitor 授权问题漏洞

The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices, which can be exploited by an attacker to gain...

DEBIAN-CVE-2021-27799

eanleadingzeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code...

CVE-2021-27799

eanleadingzeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code...

UBUNTU-CVE-2021-27799

eanleadingzeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

Null pointer dereference

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

CVE-2020-9385

CVE-2020-9385 affects libzint (Zint) up to version 2.7.1, where a NULL pointer dereference occurs due to mishandling of multiple + characters in add_on in upcean.c when invoked from eanx in upcean.c during EAN barcode generation. Multiple connected sources corroborate this detail, establishing th...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

barcode-generator.de XSS vulnerability

Open Bug Bounty ID: OBB-452772 Description| Value ---|--- Affected Website:| barcode-generator.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

ean-suche.org XSS vulnerability

Open Bug Bounty ID: OBB-440619 Description| Value ---|--- Affected Website:| ean-suche.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...