CVE-2024-50472

CVE-2024-50472 (WordPress Amilia Store plugin

CVE-2024-50472 WordPress Amilia Store plugin <= 2.9.8 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in martindrapeau Amilia Store amilia-store allows Stored XSS.This issue affects Amilia Store: from n/a through = 2.9.8...

CVE-2024-50472 WordPress Amilia Store plugin <= 2.9.8 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in martindrapeau Amilia Store amilia-store allows Stored XSS.This issue affects Amilia Store: from n/a through = 2.9.8...

CVE-2024-49275

Cross-Site Request Forgery CSRF vulnerability in Martin Gibson IdeaPush allows Cross Site Request Forgery.This issue affects IdeaPush: from n/a through 8.69...

CVE-2024-49275

Cross-Site Request Forgery CSRF vulnerability in Northern Beaches Websites IdeaPush ideapush allows Cross Site Request Forgery.This issue affects IdeaPush: from n/a through = 8.69...

CVE-2024-49275

The CVE-2024-49275 entry concerns a Cross-Site Request Forgery (CSRF) in the WordPress plugin IdeaPush by Martin Gibson, affecting versions n/a through 8.69. Patchstack documents that the vulnerability is fixed in 8.71, indicating a software fix was released to address unauthorized actions perfor...

CVE-2024-44041

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Northern Beaches Websites IdeaPush ideapush allows Stored XSS.This issue affects IdeaPush: from n/a through = 8.66...

CVE-2024-44041

The CVE CVE-2024-44041 concerns the WordPress IdeaPush plugin (versions

CVE-2024-44034

CVE-2024-44034 is a local file inclusion (path traversal) vulnerability in WordPress plugin WPSPX. Affected: WPSPX

PT-2024-30901 · Martin Greenwood · Martin Greenwood Wpspx

Name of the Vulnerable Software and Affected Versions: Martin Greenwood WPSPX versions 1.0.2 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, which allows for PHP Local File Inclusion i...

CVE-2024-46754

CVE-2024-46754 pertains to the Linux kernel BPF subsystem. The issue arises in the lwt_seg6local_prog_ops related to BPF_PROG_TYPE_LWT_SEG6LOCAL, where BPF test execution via bpf_test_run could occur without entering input_action_end_bpf() first. The root cause is tied to the seg6 local test path...

CVE-2024-46754 bpf: Remove tst_run from lwt_seg6local_prog_ops.

In the Linux kernel, the following vulnerability has been resolved: bpf: Remove tstrun from lwtseg6localprogops. The syzbot reported that the lwtseg6 related BPF ops can be invoked via bpftestrun without without entering inputactionendbpf first. Martin KaFai Lau said that self test for...

CVE-2024-40500

CVE-2024-40500 affects Martin Kucej i-librarian versions 5.11.0 and earlier. Description: a Cross-Site Scripting vulnerability in the import component’s search function can allow a local attacker to execute arbitrary code. The issue is due to improper handling in the search/import flow. Impact is...

CVE-2024-38776

Cross-Site Request Forgery CSRF vulnerability in Martin Gibson WP GoToWebinar allows Cross-Site Scripting XSS.This issue affects WP GoToWebinar: from n/a through 15.7...

CVE-2024-38776

CVE-2024-38776 affects the WordPress WP GoToWebinar plugin. The vulnerability is described as a Cross-Site Request Forgery (CSRF) that can lead to Cross-Site Scripting (XSS) in WP GoToWebinar versions up to 15.7. The applicability is stated for WP GoToWebinar: from n/a through 15.7. Remediation: ...

CVE-2024-37265

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60...

CVE-2024-37265

CVE-2024-37265 is a WordPress vulnerability affecting the IdeaPush plugin (WordPress plugin for IdeaPush). The issue is described as stored Cross‑Site Scripting (Stored XSS) arising from improper neutralization during web page generation, allowing an authenticated user (Subscriber+) to inject scr...

CVE-2024-37461

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65...

CVE-2024-38671 WordPress WP GoToWebinar plugin <= 15.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson WP GoToWebinar allows Stored XSS.This issue affects WP GoToWebinar: from n/a through 15.7...

CVE-2024-38671 WordPress WP GoToWebinar plugin <= 15.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Martin Gibson WP GoToWebinar allows Stored XSS.This issue affects WP GoToWebinar: from n/a through 15.7...