1101 matches found
WordPress Plugin Multi Store Locator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...
WordPress Store Locator for WordPress with Google Maps - LotsOfLocales plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. Cross-site request forgery vulnerability exists in WordPress Store Locator for WordPress with Google Maps - LotsOfLocales plugin version 3.98.7 an...
CVE-2022-47446
Cross-Site Request Forgery CSRF vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin = 3.98.7 versions...
CVE-2022-47446
Cross-Site Request Forgery CSRF vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin = 3.98.7 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin = 3.98.7 versions...
CVE-2022-47446 WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin = 3.98.7 versions...
CVE-2022-47446
The CVE-2022-47446 issue is a Cross-Site Request Forgery (CSRF) vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin, affecting versions up to and including 3.98.7. Multiple connected sources confirm the vulnerability and its impact vector, noting ...
WordPress plugin Store Locator for WordPress with Google Maps – LotsOfLocales 跨站请求伪造漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. Cross-site request forgery vulnerability exists in WordPress Store Locator for WordPress with Google Maps - LotsOfLocales plugin version 3.98.7 an...
Mitel MiVoice Connect 命令注入漏洞
Mitel MiVoice Connect is Mitel Canada's software for centralized management of Mitel Networks' call processing and collaboration tools. A security vulnerability exists in Mitel MiVoice Connect version 9.6.2208.101 and prior versions, which stems from an insufficient restriction of URL parameters,...
WordPress WP Multi Store Locator Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)
Software WP Multi Store Locator Type Plugin Vulnerable versions = 2.4.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0152 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID dcc1d96fdaf2 Credits Lana Codes...
WP Multi Store Locator <= 2.5 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC storelocatorshow location="'; alert1;...
WP Multi Store Locator <= 2.5 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks storelocatorshow location="'; alert1;...
WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)
Software Locatoraid Store Locator Type Plugin Vulnerable versions = 3.9.18 Fixed in 3.9.19 OWASP Top 10 A5: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2023-32576 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 48ffad270d6d Credits Abdi...
OESA-2023-1261 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging...
WordPress Locatoraid Store Locator Plugin <= 3.9.14 is vulnerable to Cross Site Scripting (XSS)
Software Locatoraid Store Locator Type Plugin Vulnerable versions = 3.9.14 Fixed in 3.9.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2031 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID c58a334fcc5f Credits Alex...
httpd: HTTP request splitting with mod_rewrite and mod_proxy
A vulnerability was found in httpd. This security issue occurs when some modproxy configurations on Apache HTTP Server allow an HTTP Request Smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern...
Ruby 安全漏洞
Ruby is a cross-platform, object-oriented, dynamically-typed programming language from the personal developer of Yukihiro Matsumoto. A security vulnerability exists in Ruby, which stems from a ReDoS issue in the URI component. The following products and versions are affected: Ruby URI gem version...
WordPress Store Locator WordPress Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)
Software Store Locator WordPress Type Plugin Vulnerable versions = 1.4.9 Fixed in 1.4.10 OWASP Top 10 A5: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2023-27618 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID fa355c2bcc3a Credits Abdi Pranata...