11 matches found
CVE-2023-40201
Cross-Site Request Forgery CSRF vulnerability in FuturioWP Futurio Extra plugin = 1.8.4 versions leads to activation of arbitrary plugin...
EUVD-2024-52134
Malicious code in bioql PyPI...
EUVD-2023-44798
Malicious code in bioql PyPI...
CVE-2024-50446
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FuturioWP Futurio Extra futurio-extra.This issue affects Futurio Extra: from n/a through = 2.0.11...
CVE-2024-53802
CVE-2024-53802 is a stored Cross-Site Scripting vulnerability in the Futurio Extra WordPress plugin. Public details indicate improper input handling during web page generation, exploitable via the header_size tag, affecting Futurio Extra versions from unspecified earlier releases up to and includ...
CVE-2024-50446
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FuturioWP Futurio Extra futurio-extra.This issue affects Futurio Extra: from n/a through = 2.0.11...
CVE-2024-50446
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FuturioWP Futurio Extra allows Stored XSS.This issue affects Futurio Extra: from n/a through 2.0.11...
CVE-2024-50446
CVE-2024-50446 concerns Futurio Extra for WordPress (FuturioWP) with Stored XSS due to improper input neutralization in Web Page Generation. Affected versions: Futurio Extra up to 2.0.11. The issue is tracked with a Patchstack listing and CVE records, which state that versions
CVE-2023-40201
Cross-Site Request Forgery CSRF vulnerability in FuturioWP Futurio Extra plugin = 1.8.4 versions leads to activation of arbitrary plugin...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in FuturioWP Futurio Extra plugin = 1.8.4 versions leads to activation of arbitrary plugin...
CVE-2023-40201
CVE-2023-40201 describes a Cross-Site Request Forgery in FuturioWP Futurio Extra plugin (versions ≤ 1.8.4) that allows activation of an arbitrary plugin. The vulnerability exists in the Futurio Extra plugin for WordPress and is exploitable without authentication per Patchstack/Red Hat/NVD summari...