8 matches found
EUVD-2023-51762
Malicious code in bioql PyPI...
CVE-2023-47663
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Menno Luitjes Foyer allows Code Injection.This issue affects Foyer: from n/a through 1.7.5...
CVE-2023-47663
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-47663
...
PT-2024-13466
Name of the Vulnerable Software and Affected Versions Menno Luitjes Foyer versions 1.7.5 and earlier Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows code injection. This is a basic XSS vulnerability that can be exploited to injec...
Foyer <= 1.7.5 - Content Injection via Improper Access Control
Description The Foyer – Digital Signage for WordPress plugin for WordPress is vulnerable to unauthorized content injection due to an insufficient capability check on the editing functionality in all versions up to, and including, 1.7.5. This makes it possible for authenticated attackers, with...
WordPress Foyer Plugin <= 1.7.5 is vulnerable to Content Injection
Software Foyer Type Plugin Vulnerable versions = 1.7.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Content Injection CVE CVE-2023-47663 Patch priority Low CVSS severity Low 4.6 Developer Claim ownership PSID 8b7640063c90 Credits Abdi Pranata Required privilege Contributor...