18 matches found
CVE-2025-23795
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ghuger Easy FAQs easy-faqs allows Stored XSS.This issue affects Easy FAQs: from n/a through = 3.2.1...
EUVD-2025-3427
Malicious code in bioql PyPI...
EUVD-2024-29906
Malicious code in bioql PyPI...
EUVD-2023-46289
Malicious code in bioql PyPI...
CVE-2024-32084
Cross-Site Request Forgery CSRF vulnerability in Gold Plugins Before And After.This issue affects Before And After: from n/a through 3.9...
CVE-2023-41797
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...
CVE-2025-23795
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ghuger Easy FAQs easy-faqs allows Stored XSS.This issue affects Easy FAQs: from n/a through = 3.2.1...
CVE-2025-23795 WordPress Easy FAQs plugin <= 3.2.1 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ghuger Easy FAQs easy-faqs allows Stored XSS.This issue affects Easy FAQs: from n/a through = 3.2.1...
PT-2025-5095 · Gold Plugins · Gold Plugins Easy Faqs
Name of the Vulnerable Software and Affected Versions: Gold Plugins Easy FAQs versions prior to 3.2.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject maliciou...
CVE-2024-32084
Cross-Site Request Forgery CSRF vulnerability in Gold Plugins Before And After.This issue affects Before And After: from n/a through 3.9...
CVE-2024-32084 WordPress Before And After plugin <= 3.9 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Gold Plugins Before And After.This issue affects Before And After: from n/a through 3.9...
CVE-2024-32084
CVE-2024-32084 : Cross-Site Request Forgery in the WordPress plugin Before And After (Lead Capture Forms) affecting versions up to 3.9. Reported CVSS 3.1 (base score 4.3, MEDIUM). Vector: NETWORK; Attack complexity: LOW; Privileges required: NONE; User interaction: REQUIRED; Impact: only partial ...
PT-2024-24389 · Unknown · Gold Plugins
Name of the Vulnerable Software and Affected Versions: Gold Plugins Before And After versions n/a through 3.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
CVE-2023-41797
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...
CVE-2023-41797
CVE-2023-41797 : The WordPress plugin Locations (Gold Plugins Locations) , affected in versions <= 4.0, contains a Stored Cross-Site Scripting (XSS) vulnerability. Connected sources confirm the issue affects the Locations plugin with contributor+ (and higher) roles storing scripts that can be ...
CVE-2023-41797 WordPress Locations Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...
PT-2023-28097 · Gold Plugins · Gold Plugins Locations
Name of the Vulnerable Software and Affected Versions: Gold Plugins Locations plugin versions prior to 4.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be stored...