15 matches found
EUVD-2024-45412
Malicious code in bioql PyPI...
CVE-2024-51576
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpza AMP Img Shortcode amp-img-shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through = 1.0.1...
CVE-2025-1559
CVE-2025-1559 (CC-IMG-Shortcode for WordPress) is a stored XSS vulnerability in versions up to 1.1.0 of the CC-IMG-Shortcode plugin. It arises from insufficient input sanitization and output escaping on attributes of the plugin’s img shortcode, allowing an authenticated attacker with contributor-...
CVE-2025-1559 CC-IMG-Shortcode <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The CC-IMG-Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'img' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
WordPress plugin CC-IMG-Shortcode 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-1559: Improper Neutralization of Input During Web Page Generation
The CC-IMG-Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'img' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
WordPress CC-IMG-Shortcode plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin CC-IMG-Shortcode versions = 1.1.0...
CVE-2024-51576
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpza AMP Img Shortcode amp-img-shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through = 1.0.1...
CVE-2024-51576
CVE-2024-51576 is a Stored XSS in the WordPress AMP Img Shortcode plugin (AMP Img Shortcode) affecting versions up to 1.0.1. The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. The CVE is documented with ranges indicating the vu...
CVE-2024-51576 WordPress AMP Img Shortcode plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpza AMP Img Shortcode amp-img-shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through = 1.0.1...
CVE-2024-51576 WordPress AMP Img Shortcode plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpza AMP Img Shortcode amp-img-shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through = 1.0.1...
WordPress plugin AMP Img Shortcode 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
CVE-2024-51576: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpza AMP Img Shortcode amp-img-shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through = 1.0.1...
WordPress AMP Img Shortcode plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin AMP Img Shortcode versions = 1.0.1...
WordPress AMP Img Shortcode Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software AMP Img Shortcode Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51576 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c1c14fcefae0 Credits SOPROBRO Required privilege Contributo...