7916 matches found
WordPress plugin LDD Directory Lite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-36178 · Unknown · Vbsso-Lite
Name of the Vulnerable Software and Affected Versions: vBSSO-lite versions 1.4.3 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability. This vulnerability allows for authentication bypass in vBSSO-lite. Recommendations: For...
WordPress plugin Abandoned Cart Lite for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin vBSSO-lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-36169 · Unknown · Ldd Directory Lite
Name of the Vulnerable Software and Affected Versions: LDD Directory Lite versions n/a through 3.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations: For...
WordPress Ajax Search Lite plugin < 4.12.4 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ajax Search Lite versions 4.12.4...
CVE-2024-10568 Ajax Search Lite < 4.12.4 - Admin+ Stored XSS
The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-10568
CVE-2024-10568 affects the WordPress plugin “Ajax Search Lite – Live Search & Filter” (versions before 4.12.4). The issue arises from improper sanitisation/escaping of certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) even if unfiltered_html is disallow...
CVE-2024-10568 Ajax Search Lite < 4.12.4 - Admin+ Stored XSS
The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-12536
A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/clientdata.php. The manipulation of the argument id leads to cross site scripting. Th...
CVE-2024-12536
A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/clientdata.php. The manipulation of the argument id leads to cross site scripting. Th...
CVE-2024-12536 SourceCodester Kortex Lite Advocate Office Management System client_data.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/clientdata.php. The manipulation of the argument id leads to cross site scripting. Th...
CVE-2024-12536 SourceCodester Kortex Lite Advocate Office Management System client_data.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/clientdata.php. The manipulation of the argument id leads to cross site scripting. Th...
CVE-2024-12536
CVE-2024-12536 affects SourceCodester Kortex Lite Advocate Office Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /control/client_data.php file triggered by manipulating the id parameter. Attackers may exploit it remotely; the description notes that the explo...
SourceCodester Kortex Lite Advocate Office Management System 代码注入漏洞
SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A code injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which originates from a parameter id and is susceptible to...
WordPress plugin Ajax Search Lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-16371 · WordPress · Ajax Search Lite
Name of the Vulnerable Software and Affected Versions: Ajax Search Lite WordPress plugin versions prior to 4.12.4 Description: The issue concerns the Ajax Search Lite WordPress plugin, where versions prior to 4.12.4 do not properly sanitize and escape some of its settings. This could allow...
WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerability
Account Takeover vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin vBSSO-lite versions = 1.4.3...
WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin LDD Directory Lite versions = 3.3...