1423 matches found
CVE-2024-29123 WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6...
CVE-2024-29123
CVE-2024-29123: Reflected XSS in Yannick Lefebvre Link Library (WordPress plugin) due to improper input neutralization during page generation. Affected: Link Library plugin for WordPress, versions up to 7.6. Outcome per sources: the vulnerability exists and has a patch available; risk details and...
CVE-2024-29123 WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6...
WordPress Plugin Link Library Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-22744 · Unknown · Link Library
Name of the Vulnerable Software and Affected Versions: Link Library versions n/a through 7.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...
WordPress Link Library Plugin <= 7.6 is vulnerable to Cross Site Scripting (XSS)
Software Link Library Type Plugin Vulnerable versions = 7.6 Fixed in 7.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29123 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5c122d7aac5b Credits stealthcopter Required privilege...
The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems is related to an uncontrolled search path during the loading of DLL libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...
Link Library < 7.6.7 - Reflected Cross-Site Scripting
Description The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchll parameter in all versions up to, and including, 7.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
WordPress Link Library Plugin <= 7.6.6 is vulnerable to Cross Site Scripting (XSS)
Software Link Library Type Plugin Vulnerable versions = 7.6.6 Fixed in 7.6.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2325 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6ac3bb374efb Credits Krzysztof Zając...
AppSamvid Security Vulnerability
AppSamvid is a free application whitelisting software from Cert-In open source. A security vulnerability exists in AppSamvid 2.0.1 and earlier versions, which originated from a vulnerability that allows an attacker with local administrative privileges to place a malicious DLL file on the target...
CVE-2023-6132
The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL...
Delta Electronics CNCSoft Code Issue Vulnerability
Delta Electronics CNCSoft is a CNC machine simulation system software from Delta Electronics, Taiwan, China. The software provides high-performance motion control, rich human-machine interface functions, user-friendly operation, high stability to meet the needs of high-speed cutting, and good...
CVE-2024-23134
A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...
CVE-2024-1559
The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'llreciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-1559
The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'llreciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-1559 Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'llreciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-1559
CVE-2024-1559 : The Link Library WordPress plugin is vulnerable to unauthenticated Stored XSS via the ‘ll_reciprocal’ parameter in all versions up to 7.6. Root cause: insufficient input sanitization and output escaping. Impact: attackers can inject arbitrary scripts that run when users view injec...
WordPress Link Library Plugin <= 7.6 is vulnerable to Cross Site Scripting (XSS)
Software Link Library Type Plugin Vulnerable versions = 7.6 Fixed in 7.6.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1559 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID da5a199a7b9e Credits Krzysztof Zając Require...
WordPress Plugin Link Library Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
Link Library < 7.6.1 - Unauthenticated Stored Cross-Site Scripting
Description The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'llreciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...