5249 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in SlickRemix Feed Them Social plugin = 3.0.2 versions...
CVE-2023-25056
CVE-2023-25056 is a Cross-Site Request Forgery (CSRF) vulnerability in the SlickRemix Feed Them Social WordPress plugin, affecting versions
CVE-2023-25056 WordPress Feed Them Social Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in SlickRemix Feed Them Social plugin = 3.0.2 versions...
WordPress plugin Feed Them Social 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2023-19902 · WordPress · Slickremix Feed Them Social
Name of the Vulnerable Software and Affected Versions: SlickRemix Feed Them Social plugin versions = 3.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...
CVE-2023-32409
creationtimestamp| type| source ---|---|--- 2023-05-19 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1028 2023-05-19 05:53:22+00:00| seen| https://t.me/thehackernews/3375 2023-05-19 06:56:21+00:00| exploited| Telegram/bE4151glB1jnVQjCfNZOuDShQFmqf3gXfesctExmF41Tw...
CVE-2023-28204
creationtimestamp| type| source ---|---|--- 2023-05-19 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1028 2023-05-19 05:53:22+00:00| seen| https://t.me/thehackernews/3375 2023-05-19 14:21:29+00:00| exploited| https://t.me/ctinow/112993 2023-05-19 17:41:24+00:00| exploite...
CVE-2015-5317
creationtimestamp| type| source ---|---|--- 2023-05-16 15:47:20+00:00| seen| https://t.me/theninjaway1337/1371 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:22+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971813 2025-02-07 21:03:01+00:00|...
Stored cross-site scripting via RSS feed
Description Due to the improper handling of RSS titles in inc/parser/xhtml.php, a malicious RSS feed can be used to inject arbitrary HTML elements into the page, resulting in cross-site scripting. inc/parser/xhtml.php line 1292-1294 javascript else $this-doc .= ' '.$item-gettitle; Proof of Concep...
CVE-2023-22685
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...
CVE-2023-22685
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...
CVE-2023-22685 WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...
CVE-2023-22685
CVE-2023-22685 represents an authenticated stored cross-site scripting (XSS) vulnerability in the WordPress plugin Category Specific RSS feed Subscription (Category Specific RSS feed Menu) for versions
CVE-2023-22685 WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...
PT-2023-18630 · Tips Tricks Hq · Category Specific Rss Feed Subscription
Name of the Vulnerable Software and Affected Versions: Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin versions = v2.2 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileg...
WordPress Plugin Category Specific RSS feed Subscription 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress 10Web Social Post Feed Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)
Software 10Web Social Post Feed Type Plugin Vulnerable versions = 1.2.8 Fixed in 1.2.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 73c5db117428 Credits Unknown Required privileg...
WordPress DevBuddy Twitter Feed Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)
Software DevBuddy Twitter Feed Type Plugin Vulnerable versions = 4.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32577 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 06d92ee07907 Credits Rio Darmawan Requir...