PT-2024-16417

Name of the Vulnerable Software and Affected Versions Simple Shortcode for Google Maps plugin for WordPress versions up to, and including, 1.5.4 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the pw map shortcode. This allows...

WordPress Simple Shortcode for Google Maps Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Simple Shortcode for Google Maps Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10621 Patch priority Low CVSS severity Low 6.5 Developer Fullworks Plugins PSID 1c153bff9061 Credits Akbar...

CVE-2024-10715

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-10715

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-10715 MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-10715: Improper Neutralization of Input During Web Page Generation

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

WordPress plugin MapPress Maps for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2024-16485 · WordPress · Mappress Maps

Name of the Vulnerable Software and Affected Versions: MapPress Maps for WordPress versions up to, and including, 2.94.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Map block due to insufficient input sanitization and output escaping on user-supplied...

WordPress MapPress Maps for WordPress plugin <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Map Block vulnerability discovered by Akbar Kustirama in WordPress Plugin MapPress Maps for WordPress versions = 2.94.1...

Malicious code in @maps-bc/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4aadf453111b6be9daf1b61a25c3d7201dbed9584797b6213c4608623e9dbeb The OpenSSF Package Analysis project identified '@maps-bc/i18n' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @maps-bc/runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10155ba7c84ace28dedd143dcb15c74cf718077864c2940d65e11f748f2b7db1 The OpenSSF Package Analysis project identified '@maps-bc/runtime' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

WordPress MapPress Maps for WordPress Plugin <= 2.94.1 is vulnerable to Cross Site Scripting (XSS)

Software MapPress Maps for WordPress Type Plugin Vulnerable versions = 2.94.1 Fixed in 2.94.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10715 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e896b2089ac1 Credits Akbar...

CVE-2024-33029

Memory corruption while handling the PDR in driver for getting the remote heap maps...

CVE-2024-33029 Use After Free in DSP Services

Memory corruption while handling the PDR in driver for getting the remote heap maps...

CVE-2024-33029 Use After Free in DSP Services

Memory corruption while handling the PDR in driver for getting the remote heap maps...

CVE-2024-33029

The CVE-2024-33029 entry describes a memory corruption condition in Qualcomm chipset drivers related to handling PDRs to obtain remote heap maps. Connected sources corroborate a PDR-driven memory corruption in a driver stack (Qualcomm/Snapdragon) without publicly available details on the exact vu...

CVE-2024-33029: Use After Free

Memory corruption while handling the PDR in driver for getting the remote heap maps...

PT-2024-25074 · Qualcomm · Snapdragon +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption while handling the PDR in a driver for getting remote heap maps. This is a memory corruption problem that occurs wh...

openSUSE Security Advisory (SUSE-SU-2024:3773-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-9235

The Mapster WP Maps plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to an insufficient capability check on the mapsterwpmapssetoptionfromjs function in all versions up to, and including, 1.5.0. This makes it possible for...