192 matches found
WordPress Sky Addons for Elementor Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)
Software Sky Addons for Elementor Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.5.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38687 Patch priority Low CVSS severity Low 6.5 Developer Shahidul Islam PSID d7729ac64aec Credits Khalid Yusuf Required privileg...
CVE-2024-33645
CVE-2024-33645 refers to an “Improper Neutralization of Input During Web Page Generation” in the Easy Set Favicon WordPress plugin (affected: Easy Set Favicon, up to version 1.1, has n/a as lower bound). The vulnerability enables a Reflected XSS as stated in the CVE description. Core details from...
CVE-2024-4234 WordPress Filterable Portfolio plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayful Islam Filterable Portfolio allows Stored XSS.This issue affects Filterable Portfolio: from n/a through 1.6.4...
CVE-2024-4234
CVE-2024-4234 affects WordPress Filterable Portfolio plugin; stored XSS due to improper input neutralization in web page generation. Affected versions: 1.6.4 and earlier (n/a–1.6.4). Root cause: improper neutralization of inputs leading to stored cross-site scripting. No public details on a fixed...
CVE-2024-4234 WordPress Filterable Portfolio plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayful Islam Filterable Portfolio allows Stored XSS.This issue affects Filterable Portfolio: from n/a through 1.6.4...
PT-2024-29880 · Unknown · Sayful Islam Filterable Portfolio
Name of the Vulnerable Software and Affected Versions: Sayful Islam Filterable Portfolio versions 1.6.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can injec...
CVE-2024-31927
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aminur Islam WP Login and Logout Redirect allows Stored XSS.This issue affects WP Login and Logout Redirect: from n/a through 1.2...
CVE-2024-31927 WordPress WP Login and Logout Redirect plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aminur Islam WP Login and Logout Redirect allows Stored XSS.This issue affects WP Login and Logout Redirect: from n/a through 1.2...
CVE-2024-31927
CVE-2024-31927 is described as an Improp er cross‑site scripting (Stored XSS) in the WordPress plugin WP Login and Logout Redirect . The vulnerability affects the plugin’s handling of login/logout redirects, allowing Stored XSS, and is noted for plugins version range “n/a through 1.2.” The connec...
PT-2024-24290 · WordPress · Aminur Islam Wp Login/Logout Redirect
Name of the Vulnerable Software and Affected Versions: Aminur Islam WP Login and Logout Redirect versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...
CVE-2024-29815
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aminur Islam WP Change Email Sender allows Stored XSS.This issue affects WP Change Email Sender: from n/a before 1.3.0...
CVE-2024-29815
Technical details for CVE-2024-29815 are not present in the connected documents. The initial description notes a Stored XSS in WP Change Email Sender up to version 1.3.0, but no product/version specifics, exploit info, or fixes are provided in the supplied materials. Monitor for updates.
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Saiful Islam Add to Cart Text Changer and Customize Button, Add Custom Icon.This issue affects Add to Cart Text Changer and Customize Button, Add Custom Icon: from n/a through 2.0...
CVE-2023-49153
CVE-2023-49153 corresponds to the WordPress plugin Add to Cart Text Changer and Customize Button, Add Custom Icon (
islam-center.net Cross Site Scripting vulnerability OBB-2678117
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
islamcenter.ru Cross Site Scripting vulnerability OBB-2573750
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
culture-islam.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181228 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Serial Swatter and Stalker Mir Islam Arrested for Allegedly Dumping Body in River
A 22-year-old man convicted of cyberstalking and carrying out numerous bomb threats and swatting attacks -- including a 2013 swatting incident at my home -- was arrested Sunday morning in the Philippines after allegedly helping his best friend dump the body of a housemate into a local river...
islamcenter.ru XSS vulnerability
Open Bug Bounty ID: OBB-603476 Description| Value ---|--- Affected Website:| islamcenter.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
islam-qna.org XSS vulnerability
Vulnerable URL: http://islam-qna.org/Articles.asp?QID=26=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3717926 VIP website...