7655 matches found
PT-2023-16225 · WordPress · Easy Affiliate Links
Name of the Vulnerable Software and Affected Versions: Easy Affiliate Links WordPress plugin versions prior to 3.7.1 Description: The issue arises from the plugin's failure to validate and escape some of its block options before outputting them back in a page or post where the block is embedded...
WordPress Easy Google Analytics for WordPress Plugin <= 1.6.0 is vulnerable to Broken Access Control
Software Easy Google Analytics for WordPress Type Plugin Vulnerable versions = 1.6.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23887 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 682fb3f4795d Credits Mika Requir...
CVE-2023-0908
A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been...
CVE-2023-0908
A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been...
Spoofing
A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been...
CVE-2023-0908
CVE-2023-0908 affects Xoslab Easy File Locker 2.2.0.184. The vulnerability is in the MessageNotifyCallback function of the xlkfs.sys kernel driver, with denial-of-service described as resulting from manipulation of that function. Exploitation requires local access, and public disclosure of the ex...
Xoslab Easy File Locker 安全漏洞
Xoslab Easy File Locker is a lightweight and easy-to-use Windows file locking software product from Xoslab. A security vulnerability exists in Xoslab Easy File Locker version 2.2.0.184. An attacker could exploit this vulnerability to cause a denial of service...
SUSE CVE-2011-2630
Opera before 11.11 allows user-assisted remote attackers to cause a denial of service application crash via a crafted web page that is not properly handled during a reload occurring after the opening of a popup of the Easy Sticky Note extension...
SUSE CVE-2017-17845
An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random is used by pretty Easy privacy pEp, aka TBE-01-001...
SUSE CVE-2018-16840
A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the Curlclose function, the library code first frees a struct without nulling the pointer and might then subsequently...
SUSE CVE-2019-3687
The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to...
WordPress Easy Panorama Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
Software Easy Panorama Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23799 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 77cda799a1f9 Credits Rio Darmawan Required...
Cross site scripting
The Easy Accept Payments for PayPal WordPress plugin before 4.9.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...
CVE-2023-0275 Easy Accept Payments for PayPal < 4.9.10 - Contributor+ Stored XSS
The Easy Accept Payments for PayPal WordPress plugin before 4.9.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...
CVE-2023-0275
CVE-2023-0275 affects the WordPress plugin Easy Accept Payments for PayPal, prior to version 4.9.10. The issue is that the plugin does not validate and escape certain shortcode attributes before output, enabling Stored XSS for users with the Contributor role or higher. Affects the plugin’s shortc...
CVE-2022-4628 Easy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in Shortcode
The Easy PayPal Buy Now Button WordPress plugin before 1.7.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...
CVE-2022-4628
The CVE-2022-4628 entry covers a Stored Cross-Site Scripting vulnerability in the WordPress plugin Easy PayPal Buy Now Button prior to version 1.7.4. Multiple sources confirm that the plugin fails to validate and escape certain shortcode attributes before rendering them on post/pages, enabling us...
CVE-2022-4628 Easy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in Shortcode
The Easy PayPal Buy Now Button WordPress plugin before 1.7.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...
WordPress plugin Easy Accept Payments for PayPal 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...