20 matches found
CVE-2023-46193
Cross-Site Request Forgery CSRF vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...
CVE-2023-5641
The Martins Free & Easy SEO BackLink Link Building Network WordPress plugin before 1.2.30 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-5641
The Martins Free & Easy SEO BackLink Link Building Network WordPress plugin before 1.2.30 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-5641
The CVE-2023-5641 entry concerns Martins Free & Easy SEO BackLink Link Building Network WordPress plugin (before 1.2.30). The vulnerability is a Reflected Cross‑Site Scripting caused by insufficient sanitization/escaping of a parameter before it is output on the page, potentially affecting high-p...
CVE-2023-46192
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...
CVE-2023-46192 WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...
CVE-2023-46192
CVE-2023-46192 refers to a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Internet Marketing Ninjas Internal Link Building”, affecting versions 1.2.3 or apply vendor-provided patch when available.
Internal Link Building <= 1.2.3 - Admin+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress plugin Internal Link Building Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-46193
Cross-Site Request Forgery CSRF vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...
Internal Link Building <= 1.2.3 - CSRF
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
WordPress Plugin Internal Link Building Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2023-46193 WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Internet Marketing Ninjas Internal Link Building plugin = 1.2.3 versions...
CVE-2023-46193
CVE-2023-46193 is a CSRF vulnerability in Internet Marketing Ninjas Internal Link Building plugin for WordPress, affected versions are
WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software Internal Link Building Type Plugin Vulnerable versions = 1.2.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46193 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4692712a98eb Credits LEE SE HYOUNG...
WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)
Software Internal Link Building Type Plugin Vulnerable versions = 1.2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46192 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5c522f000eb4 Credits LEE SE HYOUNG...
SEO poisoning: Is it worth it?
Search Engine Optimization SEO poisoning basically comes down to getting your web page high in the rankings for relevant search results without buying advertisements or using legitimate, but tedious, SEO best practices. Instead, threat actors use illegal means to push their page to the top...
Torrent-Finder fighting with Google for Domain !
The US government - along with organizations like the RIAA and the MPAA - are hitting Torrent sites where it hurts. Indeed, due to a slew of recent domain seizures, affected websites are currently experiencing major dips in traffic. However, Torrent-Finder is refusing to throw in the towel. The...