7048 matches found
PT-2024-16938 · WordPress · Seo Landing Page Generator
Name of the Vulnerable Software and Affected Versions: SEO Landing Page Generator plugin for WordPress versions up to, and including, 1.66.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without proper escaping on the URL. This allows...
WordPress SEO Landing Page Generator plugin <= 1.66.2 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin SEO Landing Page Generator versions = 1.66.2...
Malicious code in test-generator-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e14a996fe338bdf1114d3b98c7854b3d68b3e44ce835139b810ba1f5be6f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11011 Malicious code in test-generator-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e14a996fe338bdf1114d3b98c7854b3d68b3e44ce835139b810ba1f5be6f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-32468 Improper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator
Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the denodoc crate which lead to Self-XSS with deno doc --html. 1. XSS in generated searchindex.js, denodoc outputs a JavaScript file for searching. However, the generated file...
CVE-2024-32468 Improper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator
Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the denodoc crate which lead to Self-XSS with deno doc --html. 1. XSS in generated searchindex.js, denodoc outputs a JavaScript file for searching. However, the generated file...
WordPress PDF Invoices & Packing Slips Generator for WooCommerce plugin <= 2.2.1 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin PDF Invoices & Packing Slips Generator for WooCommerce versions = 2.2.1...
Exploit for Code Injection in Geoserver
CVE-2024-36401-WoodpeckerPlugin Introduction CVE-2024-36...
SUSE CVE-2024-53085
In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpmpmsuspend first Setting TPMCHIPFLAGSUSPENDED in the end of tpmpmsuspend can be racy according, as this leaves window for tpmhwrngread to be called while the operation is in progress. The recent bug report...
DEBIAN-CVE-2024-53085
In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpmpmsuspend first Setting TPMCHIPFLAGSUSPENDED in the end of tpmpmsuspend can be racy according, as this leaves window for tpmhwrngread to be called while the operation is in progress. The recent bug report...
CVE-2024-51641
Cross-Site Request Forgery CSRF vulnerability in Juan Camilo Advanced PDF Generator advanced-pdf-generator allows Stored XSS.This issue affects Advanced PDF Generator: from n/a through = 0.4.0...
CVE-2024-51641 WordPress Advanced PDF Generator plugin <= 0.4.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Juan Camilo Advanced PDF Generator advanced-pdf-generator allows Stored XSS.This issue affects Advanced PDF Generator: from n/a through = 0.4.0...
CVE-2024-51641 WordPress Advanced PDF Generator plugin <= 0.4.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Juan Camilo Advanced PDF Generator advanced-pdf-generator allows Stored XSS.This issue affects Advanced PDF Generator: from n/a through = 0.4.0...
CVE-2024-51641
CVE-2024-51641 concerns WordPress Advanced PDF Generator plugin versions
PT-2024-34785 · Unknown · Advanced Pdf Generator
Name of the Vulnerable Software and Affected Versions: Advanced PDF Generator versions 0.4.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...
WordPress plugin Advanced PDF Generator 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A cross-site request forgery...
CVE-2024-52394
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Stored XSS.This issue affects Print PDF Generator and Publisher: from n/a through = 1.1.6...
CVE-2024-52394 WordPress Print PDF Generator and Publisher plugin <= 1.1.6 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Stored XSS.This issue affects Print PDF Generator and Publisher: from n/a through = 1.1.6...
CVE-2024-52394
CVE-2024-52394 is a Stored XSS vulnerability in the WordPress plugin Print PDF Generator and Publisher (nopea.Media) affecting versions <= 1.1.6. The issue results from improper input neutralization during web page generation. Several connected sources confirm the affected software and the XSS...