WordPress plugin Genesis Style Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress Genesis Style Shortcodes Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Genesis Style Shortcodes versions = 1.0...

Malicious code in bsc-genesis-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11870 Malicious code in bsc-genesis-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

CVE-2024-51638

Cross-Site Request Forgery CSRF vulnerability in Sanjeev Mohindra Awesome Shortcodes For Genesis awesome-shortcodes-for-genesis allows Stored XSS.This issue affects Awesome Shortcodes For Genesis: from n/a through 1.1.8...

CVE-2024-51638 WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sanjeev Mohindra Awesome Shortcodes For Genesis awesome-shortcodes-for-genesis allows Stored XSS.This issue affects Awesome Shortcodes For Genesis: from n/a through 1.1.8...

CVE-2024-51638

CVE-2024-51638 is a CSRF-to-Stored XSS vulnerability in the WordPress plugin Awesome Shortcodes For Genesis (versions up to 1.1.8). Exploitation is implied to enable stored XSS via CSRF context; CVSSv3.1 base score 7.1 (high). Public references indicate WordPress plugin 1.1.8 is affected; patch s...

CVE-2024-51638 WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sanjeev Mohindra Awesome Shortcodes For Genesis awesome-shortcodes-for-genesis allows Stored XSS.This issue affects Awesome Shortcodes For Genesis: from n/a through 1.1.8...

WordPress plugin Awesome Shortcodes For Genesis 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2024-34782 · Unknown · Awesome Shortcodes For Genesis

Name of the Vulnerable Software and Affected Versions: Awesome Shortcodes For Genesis versions 1.1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user into performing unintended actio...

WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Awesome Shortcodes For Genesis versions 1.1.8...

WordPress Awesome Shortcodes For Genesis Plugin 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Awesome Shortcodes For Genesis Type Plugin Vulnerable versions 1.1.8 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51638 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 555acd2f113e Credits SOPROBRO...

The vulnerability of the GraphWorX64 module in the GENESIS64 SCADA system allows a intruder to load arbitrary files or execute arbitrary code.

The vulnerability of the GraphWorX64 module in the GENESIS64 SCADA system is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to download arbitrary files or execute arbitrary code remotely...

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system allows a intruder to gain unauthorized access to project files.

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to project files...

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system allows a intruder to disclose protected information.

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

CVE-2024-3563

The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sharing block in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

CVE-2024-3563

The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sharing block in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

CVE-2024-3563

The CVE-2024-3563 issue affects the Genesis Blocks WordPress plugin. It enables Stored XSS via the Sharing block in versions up to 3.1.3 due to insufficient input sanitization and output escaping on user-supplied attributes. An attacker with contributor-level access or higher could inject scripts...

WordPress Genesis Blocks plugin <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sharing Block Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Sharing Block Attributes vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Genesis Blocks versions = 3.1.3...

PT-2024-26575 · WordPress · Genesis Blocks

Name of the Vulnerable Software and Affected Versions: Genesis Blocks plugin for WordPress versions up to, and including, 3.1.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Sharing block due to insufficient input sanitization and output escaping on user-suppli...