11 matches found
EUVD-2024-17136
Malicious code in bioql PyPI...
CVE-2024-1379
CVE-2024-1379 affects Website Article Monetization By MageNet for WordPress. All versions up to 1.0.11 are vulnerable to unauthenticated Stored XSS via the abp_auth_key parameter due to insufficient input sanitization/output escaping and a missing authorization check, enabling injection of script...
CVE-2024-1379
The Website Article Monetization By MageNet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'abpauthkey' parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping and a missing authorization check. This makes it...
CVE-2024-1379 Website Article Monetization By MageNet <= 1.0.11 - Unauthenticated Stored Cross-Site Scripting
The Website Article Monetization By MageNet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'abpauthkey' parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping and a missing authorization check. This makes it...
WordPress Website Article Monetization By MageNet Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)
Software Website Article Monetization By MageNet Type Plugin Vulnerable versions = 1.0.11 Fixed in 1.0.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1379 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c2e35ea0b2a0...
Website Article Monetization By MageNet < 1.0.12 - Unauthenticated Stored XSS
Description The plugin is vulnerable to Stored Cross-Site Scripting via the 'abpauthkey' parameter due to insufficient input sanitization and output escaping and a missing authorization check. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in MageNet Website Monetization by MageNet plugin = 1.0.29.1 versions...
CVE-2023-22673
CVE-2023-22673 is a CSRF vulnerability in the WordPress plugin Website Monetization by MageNet (MageNet) for versions
CVE-2023-22673 WordPress Website Monetization by MageNet Plugin <= 1.0.29.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in MageNet Website Monetization by MageNet plugin = 1.0.29.1 versions...
CVE-2023-22673 WordPress Website Monetization by MageNet Plugin <= 1.0.29.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in MageNet Website Monetization by MageNet plugin = 1.0.29.1 versions...
WordPress Website Monetization by MageNet Plugin <= 1.0.29.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Website Monetization by MageNet Type Plugin Vulnerable versions = 1.0.29.1 Fixed in 1.0.29.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-22673 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4604ac72b6a8 Credi...