112 matches found
CVE-2022-37339
Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Meet My Team plugin = 2.0.5 at WordPress...
Cross site scripting
Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Meet My Team plugin = 2.0.5 at WordPress...
CVE-2022-37339 WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Meet My Team plugin = 2.0.5 at WordPress...
CVE-2022-37339
CVE-2022-37339 affects the WordPress Meet My Team plugin (versions ≤ 2.0.5). The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) flaw in Fullworks Meet My Team, caused by insufficient sanitization/escaping of inputs. A user with Contributor+ privileges can inject script that m...
CVE-2022-37339: Improper Neutralization of Input During Web Page Generation
Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Meet My Team plugin = 2.0.5 at WordPress...
PT-2022-23935 · Fullworks · Fullworks Meet My Team Plugin
Name of the Vulnerable Software and Affected Versions: Fullworks Meet My Team plugin version 2.0.5 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with contributor or higher privileges can inject maliciou...
WordPress Fullworks Directory plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Fullworks Directory plugin versions = 1.0.1. Solution No patched version available...
WordPress Fullworks Slack plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Fullworks Slack plugin versions = 1.0.1. Solution No patched version available...
WordPress Fullworks Firewall plugin <= 1.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Fullworks Firewall plugin versions = 1.1.2. Solution No patched version available...
WordPress Fullworks Directory plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Fullworks Directory plugin versions = 1.0.1. Solution No patched version available...
WordPress Fullworks Firewall plugin <= 1.1.2 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Fullworks Firewall plugin versions = 1.1.2. Solution No patched version available...
WordPress Fullworks Slack plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Fullworks Slack plugin versions = 1.0.1. Solution No patched version available...