5255 matches found
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Feed plugin = 2.2.1 versions...
CVE-2023-47522 WordPress Photo Feed Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Feed plugin = 2.2.1 versions...
CVE-2023-47522 WordPress Photo Feed Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Feed plugin = 2.2.1 versions...
CVE-2023-47522
CVE-2023-47522 is a reflected, unauthenticated XSS vulnerability in the Photo Feed WordPress plugin prior to version 2.2.1. The issue is triggered via the pf-gid parameter, enabling attacker-controlled script execution in a victim’s browser. Affected software: Photo Feed plugin
CVE-2023-36036
creationtimestamp| type| source ---|---|--- 2023-11-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-14 22:02:58+00:00| exploited| https://t.me/informationsecuritychannel/51004 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160...
CVE-2023-36033
creationtimestamp| type| source ---|---|--- 2023-11-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-14 22:02:58+00:00| exploited| https://t.me/informationsecuritychannel/51004 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160...
PT-2023-30483 · Unknown · Photo Feed
Name of the Vulnerable Software and Affected Versions: Photo Feed plugin versions prior to 2.2.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially allowing them t...
WordPress Plugin Photo Feed Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
CVE-2023-34384
Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...
CVE-2023-34384
Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...
CVE-2023-34384 WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...
CVE-2023-34384
CVE-2023-34384 affects the Kebo Twitter Feed WordPress plugin (versions
WordPress Plugin kebo-twitter-feed Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2023-24854 · Unknown · Kebo Twitter Feed
Name of the Vulnerable Software and Affected Versions: Kebo Twitter Feed plugin versions prior to 1.5.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
WordPress Plugin accesspress-twitter-feed Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
The vulnerability of the httplib2 component from the Python-httplib2 library allows attackers to compromise data integrity.
The vulnerability of the httplib2 component in the Python-httplib2 library is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker to compromise data integrity...
CVE-2023-47227
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Web-Settler Social Feed | All social media in one place plugin = 1.5.4.6 versions...