121 matches found
kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
Description The plugin does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition. PoC 1- Install and activate kk Star Ratings. 2- Go to the page that displays the star rating. 3- Using Burp and the Turbo Intruder extension, intercept the rating...
WordPress kk Star Ratings Plugin <= 5.4.5 is vulnerable to Broken Access Control
Software kk Star Ratings Type Plugin Vulnerable versions = 5.4.5 Fixed in 5.4.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46639 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f81ae2f458b9 Credits Revan Arifio Required privile...
WordPress kk Star Ratings Plugin < 5.4.5 is vulnerable to Cross Site Scripting (XSS)
Software kk Star Ratings Type Plugin Vulnerable versions 5.4.5 Fixed in 5.4.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a02b4b22ea39 Credits Rafie Muhammad Patchstack Required...
WordPress kk Star Ratings Plugin <= 5.4.3 is vulnerable to Broken Access Control
Software kk Star Ratings Type Plugin Vulnerable versions = 5.4.3 Fixed in 5.4.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36528 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ef1dd884760d Credits Mika Required privilege...
tajima-kk.co.jp Cross Site Scripting vulnerability OBB-3390316
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kk-nbc.jp Cross Site Scripting vulnerability OBB-2813607
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
new packages: hunspell-kk
An update is available for hunspell-kk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
WordPress kk Star Ratings plugin < 5.2.9 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress kk Star Ratings plugin versions 5.2.9. Solution Update the WordPress kk Star Ratings plugin to the latest available version at least 5.2.9...
WordPress kk Star Ratings plugin < 5.2.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress kk Star Ratings plugin versions 5.2.9. Solution Update the WordPress kk Star Ratings plugin to the latest available version at least 5.2.9...
CVE-2020-35438
Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...
CVE-2020-35438
Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...
Cross site scripting
Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...
CVE-2020-35438
CVE-2020-35438 is a Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin prior to version 4.1.5. The issue affects the plugin’s handling of user-provided input in its rating functionality, enabling an attacker to inject malicious scripts. Public sources in connected documents co...
CVE-2020-35438
Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...
Kk Star Ratings 跨站脚本漏洞
kk-star-ratings is an application. Used to allow blog visitors to engage and interact with your site by rating posts. A cross-site scripting vulnerability exists in the Kk Star Ratings plugin prior to version 4.1.5...
PT-2021-11765 · Unknown · Kk Star Ratings
Name of the Vulnerable Software and Affected Versions: kk Star Ratings plugin versions prior to 4.1.5 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to...
KK Video Recorder for PC suffers from DLL hijacking vulnerability
KK Video Recorder is a free HD video recording software that combines multiple functions such as game recording and video recording. KK Video Recorder for PC suffers from a DLL hijacking vulnerability that can be exploited by attackers to gain control of the server...
Soliton Systems Kk FileZen Path Traversal Vulnerability
Soliton Systems Kk FileZen is a file hosting device from Soliton Systems Kk, Japan. The device features file storage, file transfer, file upload and download. A security vulnerability exists in Soliton Systems FileZen that originates from an input validation error when processing a directory...
kk-technology.sk Cross Site Scripting vulnerability OBB-1479905
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kk-technology.sk Cross Site Scripting vulnerability OBB-1469016
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...