98 matches found
PT-2026-2825
The AJS Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note list class' and 'popup display effect in' parameters in all versions up to, and including, 1.0 due to missing authorization and nonce verification on settings save, as well as insufficient input...
WordPress plugin AJS Footnotes 跨站脚本漏洞
WordPress AJS Footnotes plugin is a plugin for WordPress designed to add aesthetically pleasing footnote features to posts or pages. The WordPress AJS Footnotes plugin suffers from a cross-site scripting vulnerability that stems from the lack of valid filtering and escaping of notelistclass and...
CVE-2025-11733
The Footnotes Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 3.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
WordPress Footnotes Made Easy plugin <= 3.0.7 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Footnotes Made Easy versions = 3.0.7...
CVE-2025-11733 Footnotes Made Easy <= 3.0.7 - Unauthenticated Stored Cross-Site Scripting
The Footnotes Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 3.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
PT-2025-44937
Name of the Vulnerable Software and Affected Versions The Footnotes Made Easy plugin for WordPress versions prior to 3.0.8 Description The plugin is susceptible to Stored Cross-Site Scripting through its settings. Insufficient input sanitization and output escaping allow unauthenticated attackers...
WordPress plugin Footnotes Made Easy 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
EUVD-2008-0701
Malware in sbrugna...
EUVD-2025-9284
Malicious code in bioql PyPI...
EUVD-2021-30707
Malicious code in bioql PyPI...
EUVD-2023-32119
Malicious code in bioql PyPI...
EUVD-2023-57911
Malicious code in bioql PyPI...
EUVD-2024-52917
Malicious code in bioql PyPI...
EUVD-2025-28366
Malicious code in bioql PyPI...
Give footnotes the boot
I hate footnotes1, and hopefully by the end of this, you will too. Let's get down to it… The UX of footnotes in printed media You, the reader, encounter a tiny number2 within some prose. This indicates to you that I, the writer, have something more to say on this topic. And, for your inconvenienc...
CVE-2025-50049
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prismtechstudios Modern Footnotes modern-footnotes allows Stored XSS.This issue affects Modern Footnotes: from n/a through = 1.4.19...
CVE-2025-50049
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prismtechstudios Modern Footnotes modern-footnotes allows Stored XSS.This issue affects Modern Footnotes: from n/a through = 1.4.19...
CVE-2025-50049 WordPress Modern Footnotes plugin <= 1.4.19 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prismtechstudios Modern Footnotes modern-footnotes allows Stored XSS.This issue affects Modern Footnotes: from n/a through = 1.4.19...
CVE-2025-50049 WordPress Modern Footnotes plugin <= 1.4.19 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prismtechstudios Modern Footnotes allows Stored XSS. This issue affects Modern Footnotes: from n/a through 1.4.19...
CVE-2025-50049
CVE-2025-50049 affects WordPress Modern Footnotes plugin (versions up to 1.4.19). Root cause: Improper input neutralization during web page generation, enabling Stored XSS. Impact is Stored Cross-Site Scripting with the plugin listed as patched; remediation is to upgrade to a version later than 1...