WordPress Plugin White Label Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-14425 · WordPress · White Label – Wordpress Custom Admin

Name of the Vulnerable Software and Affected Versions: White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard versions 2.9.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user...

White Label < 2.9.1 - Cross-Site Request Forgery via white_label_reset_wl_admins

Description The White Label plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.0. This is due to missing or incorrect nonce validation on the whitelabelresetwladmins function. This makes it possible for unauthenticated attackers to reset plugin...

WordPress White Label Plugin <= 2.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software White Label Type Plugin Vulnerable versions = 2.9.0 Fixed in 2.9.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-52128 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 46d772e6a849 Credits Brandon Roldan Required...

SUSE-SU-2023:4910-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2023-38473: Fixed a reachable assertion when parsing a host name bsc1216419. - CVE-2023-38470: Fixed that each label is at least one byte long bsc1215947...

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

GHSA-M3P6-43XJ-PF9V Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

Cross site scripting

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

PT-2023-31473 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS via Label management editing. This means an attacker could potentially inject malicious scripts into the website, affecting users who access the edited...

JFinalCMS Cross-Site Scripting Vulnerability

JFinalCMS is a content management system by heyewei Personal Developer. A cross-site scripting vulnerability exists in JFinalCMS version 5.0.0, which stems from a cross-site scripting XSS vulnerability in the Label management editing...

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

CVE-2023-50101

JFinalcms 5.0.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the Label management editing feature. The issue is described across multiple sources (including Red Hat and Veracode feeds) as stemming from insufficient input validation in the library’s label management flow, enabling ...

provenprivatelabel.com Improper Access Control vulnerability OBB-3808565

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task

Introduction This write-up describes a vulnerability found in Label Studio, a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.9.2post0 and was tested on version 1.8.2. Overview In all current versions of Label Studio, the application allow...

GHSA-6HJJ-GQ77-J4QW Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task

Introduction This write-up describes a vulnerability found in Label Studio, a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.9.2post0 and was tested on version 1.8.2. Overview In all current versions of Label Studio, the application allow...

kernel: mpls: double free on sysctl allocation failure

A double-free flaw was found in the Linux kernel when the MPLS implementation handled sysctl allocation failures. This issue could allow a local user to cause a denial of service or possibly execute arbitrary code...