3404 matches found
WordPress plugin Leaflet Maps Marker 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-3670: Improper Neutralization of Input During Web Page Generation
The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mapsmarker' shortcode in all versions up to, and including, 3.12.8 due to insufficient input sanitization and output escaping on user supplied attribut...
WordPress Plugin Interactive World Maps 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...
CVE-2024-3681: Improper Neutralization of Input During Web Page Generation
The Interactive World Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search s parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
PT-2024-27133 · WordPress · Leaflet Maps Marker
Name of the Vulnerable Software and Affected Versions: Leaflet Maps Marker plugin for WordPress versions up to, and including, 3.12.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes, such as...
CVE-2024-4203: Improper Neutralization of Input During Web Page Generation
The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maps widget in all versions up to, and including, 4.10.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2024-29695
Name of the Vulnerable Software and Affected Versions Premium Addons Pro for Elementor plugin for WordPress versions up to, and including, 4.10.30 Description The issue is related to Stored Cross-Site Scripting via the maps widget due to insufficient input sanitization and output escaping on...
kernel: kernel: Denial of Service via memory leak in LRU hash maps
A flaw was found in the Linux kernel. A local user could exploit a memory leak vulnerability in the Least Recently Used LRU and LRUPERCPU hash maps. This occurs when the kernel allocates a new element during a map update but fails to release it if the hash table bucket cannot be locked. Repeated...
WordPress Interactive World Maps plugin <= 2.4.14 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Usama Arshad in WordPress Plugin Interactive World Maps versions = 2.4.14...
WordPress Interactive World Maps Plugin <= 2.4.14 is vulnerable to Cross Site Scripting (XSS)
Software Interactive World Maps Type Plugin Vulnerable versions = 2.4.14 Fixed in 2.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3681 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 878a6d2b6c74 Credits Usama Arshad...
CVE-2024-29003
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...
CVE-2024-29003
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...
CVE-2024-29003
CVE-2024-29003 affects the SolarWinds Platform, specifically a cross-site scripting flaw in the maps section of the UI. The vulnerability requires authentication and user interaction to exploit and can expose data via XSS. The issue is documented across multiple sources (NVD/NCSC/Red Hat/RH advis...
CVE-2024-29003 SolarWinds Platform Cross Site Scripting Vulnerability
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...
CVE-2024-29003 SolarWinds Platform Cross Site Scripting Vulnerability
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...
CVE-2024-29003: Improper Neutralization of Input During Web Page Generation
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...
PT-2024-3481 · Solarwinds · Solarwinds Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue is related to a XSS vulnerability in the maps section of the user interface. This vulnerability requires authentication and user interaction to be exploited. It may...
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Description The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mapsmarker' shortcode in all versions up to, and including, 3.12.8 due to insufficient input sanitization and output escaping on user...