EUVD-2024-36494

Malicious code in bioql PyPI...

EUVD-2024-19359

Malicious code in bioql PyPI...

CVE-2024-21745

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

CVE-2024-37203

Missing Authorization vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

CVE-2024-37203

Missing Authorization vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

CVE-2024-37203 WordPress Laybuy Payment Extension for WooCommerce plugin <= 5.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

CVE-2024-37203

CVE-2024-37203 affects Laybuy Payment Extension for WooCommerce (up to version 5.3.9). Root cause: Missing/incorrectly configured authorization (Broken Access Control) allowing unauthorized access actions. CVSS v3.1 base score 4.3 (Medium). Remediation: upgrade to a version later than 5.3.9; no f...

PT-2024-27371 · Woocommerce · Laybuy Payment Extension For Woocommerce

Name of the Vulnerable Software and Affected Versions: Laybuy Payment Extension for WooCommerce versions through 5.3.9 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: F...

WordPress plugin Laybuy Payment Extension for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Laybuy Payment Extension for WooCommerce plugin <= 5.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Laybuy Payment Extension for WooCommerce versions = 5.3.9...

Laybuy Payment Extension for WooCommerce <= 5.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Laybuy Payment Extension for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

CVE-2024-21745

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

CVE-2024-21745

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

CVE-2024-21745 WordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

CVE-2024-21745 WordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9...

CVE-2024-21745

CVE-2024-21745 describes Stored XSS in Laybuy Payment Extension for WooCommerce (WordPress plugin) caused by improper input neutralization during web page generation. Affected: Laybuy Laybuy Payment Extension for WooCommerce up to version 5.3.9. Impact per sources: stored XSS could be triggered v...

WordPress Plugin Laybuy Payment Extension for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2024-19032 · Woocommerce · Laybuy Payment Extension For Woocommerce

Name of the Vulnerable Software and Affected Versions: Laybuy Payment Extension for WooCommerce versions through 5.3.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that a...

WordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS)

Software Laybuy Payment Extension for WooCommerce Type Plugin Vulnerable versions = 5.3.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-21745 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c11e093086f2 Credits Khalid Yusuf...