WordPress Plugin Evergreen Content Poster Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Evergreen Content Poster Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Evergreen Content Poster Type Plugin Vulnerable versions = 1.4 Fixed in 1.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-41127 Patch priority Low CVSS severity Low 5.9 Developer Evergreen Content Poster PSID 35d54e5980dd Credits DoYeon Park p6rkdoye0n...

evergreenorganicsbelize.com Cross Site Scripting vulnerability OBB-2690915

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress RevivePress – Keep your Old Content Evergreen plugin < 1.3.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress RevivePress – Keep your Old Content Evergreen plugin versions 1.3.1. Solution Update the WordPress RevivePress – Keep your Old Content Evergreen plugin to the latest available version at least 1.3.1...

WordPress RevivePress – Keep your Old Content Evergreen plugin < 1.3.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress RevivePress – Keep your Old Content Evergreen plugin versions 1.3.1. Solution Update the WordPress RevivePress – Keep your Old Content Evergreen plugin to the latest available version at least 1.3.1...

Xiaozhi Desktop is vulnerable to dll hijacking

Xiaozhi Desktop is a desktop organizer developed by Shenzhen Evergreen Technology Co. to improve office efficiency. Xiaozhi Desktop has a dll hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...

evergreen-line.com XSS vulnerability

Open Bug Bounty ID: OBB-716064 Description| Value ---|--- Affected Website:| evergreen-line.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

evergreen-marine.com XSS vulnerability

Open Bug Bounty ID: OBB-716060 Description| Value ---|--- Affected Website:| evergreen-marine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

evergreen-shipping.us Open Redirect vulnerability

Open Bug Bounty ID: OBB-560765 Description| Value ---|--- Affected Website:| evergreen-shipping.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Evergreen Information Disclosure Vulnerability

Evergreen is an open source, highly scalable library system ILS developed by the Evergreen community. The system helps patrons find library materials and helps with library management, organizing catalogs, and distributing those materials, among other things. A security vulnerability exists in th...

CVE-2015-2204

Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by leveraging failure of open-ils.actor.ousetting.ancestordefault to enforce viewperm when no auth token is...

CVE-2015-2203

Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFFLOGIN permission to obtain sensitive settings history information by leveraging listing of open-ils.pcrud as a controller in the IDL...

Code injection

Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFFLOGIN permission to obtain sensitive settings history information by leveraging listing of open-ils.pcrud as a controller in the IDL...

CVE-2013-7435

The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user permission for retrieval in fmIDL.xml...

Design/Logic Flaw

Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by leveraging failure of open-ils.actor.ousetting.ancestordefault to enforce viewperm when no auth token is...

Design/Logic Flaw

The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user permission for retrieval in fmIDL.xml...

CVE-2013-7435

The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user permission for retrieval in fmIDL.xml...

CVE-2015-2204

Affected software: Evergreen ILS (open-ils) prior to specific patch levels. The vulnerability arises when open-ils.actor.ou_setting.ancestor_default fails to enforce view_perm in the absence of an auth token, allowing remote attackers to view sensitive org unit settings. Impact is information dis...

CVE-2015-2204

Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by leveraging failure of open-ils.actor.ousetting.ancestordefault to enforce viewperm when no auth token is...

CVE-2013-7435

CVE-2013-7435 details (Evergreen ILS) Affected software: Evergreen open-ils.pcrud endpoint (library system) prior to versions 2.5.9, 2.6.x prior to 2.6.7, and 2.7.x prior to 2.7.4. Root cause: a permission gap in fm_IDL.xml enables retrieval of the settings history without proper authorization. I...