173 matches found
CVE-2023-24535 vulnerabilities
Vulnerabilities for packages: ko...
CVE-2023-24535 vulnerabilities
Vulnerabilities for packages: ko...
ko-re-a.org Cross Site Scripting vulnerability OBB-3377908
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-30551 vulnerabilities
Vulnerabilities for packages: apko, ko, aactl...
GHSA-2H5H-59F5-C5X9 vulnerabilities
Vulnerabilities for packages: apko, ko, aactl...
GHSA-2H5H-59F5-C5X9 vulnerabilities
Vulnerabilities for packages: apko, ko, aactl...
WordPress Ko-fi Button Plugin < 1.3.3 is vulnerable to Cross Site Scripting (XSS)
Software Ko-fi Button Type Plugin Vulnerable versions 1.3.3 Fixed in 1.3.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2254 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID af182fbd1aaa Credits Felipe Restrepo Rodriguez...
Ko-fi Button < 1.3.3 - Admin+ Stored XSS
The plugin does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup, and we consider it a low risk. PoC 1. In the Kofi plugin settings,...
Ko-fi Button < 1.3.3 - Admin+ Stored XSS
The plugin does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup, and we consider it a low risk. 1. In the Kofi plugin settings, change...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: up, ctop, ko, melange, bom, apko, helm...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: apko, ctop, bom, helm, melange, up, ko...
CVE-2023-28840 vulnerabilities
Vulnerabilities for packages: apko, ctop, bom, helm, melange, up, ko...
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: up, ctop, ko, melange, bom, apko, helm...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: up, ctop, ko, melange, bom, apko, helm...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: apko, ctop, bom, helm, melange, up, ko...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: up, ctop, ko, melange, bom, apko, helm...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: apko, ctop, bom, helm, melange, up, ko...
GHSA-HW7C-3RFG-P46J vulnerabilities
Vulnerabilities for packages: ko...
GHSA-HW7C-3RFG-P46J vulnerabilities
Vulnerabilities for packages: ko...
ko-fu-en.net Cross Site Scripting vulnerability OBB-3044784
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...