CVE-2024-8092

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress Accordion Image Menu plugin <= 3.1.3 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Accordion Image Menu versions = 3.1.3...

CVE-2024-8092

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-8092

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-8092

The CVE-2024-8092 entry concerns the WordPress Accordion Image Menu plugin (versions 3.1.3 and earlier) with CSRF checks missing in several areas and insufficient sanitisation/escapes, enabling a logged-in administrator to inject Stored XSS via CSRF. Affected component: plugin functionality handl...

WordPress Accordion Image Menu Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Accordion Image Menu Type Plugin Vulnerable versions = 3.1.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8092 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 74d0d44e3282 Credits Daniel Ruf Requir...

Zomato: [www.zomato.com] Privilege Escalation - /php/restaurant_menus_handler.php

Introduction In the following ██████████ the endpoint /php/restaurantmenushandler.php was found. This endpoint is meant solely to be accessible for admins, however due to insufficient protections normal users can access this endpoint too. This results in any Zomato user being able to edit and...

Squito Gallery 1.0 - Cross Site Scripting Vulnerability

No description provided by source. ======================================================================================== | Title : Squito Gallery v.1.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi -...