Cross site scripting

Unauth. Stored Cross-Site Scripting XSS vulnerability in Gravity Master Product Enquiry for WooCommerce plugin = 3.0 versions...

CVE-2023-47696 WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Gravity Master Product Enquiry for WooCommerce plugin = 3.0 versions...

CVE-2023-47696

The CVE-2023-47696 entry concerns the Gravity Master Product Enquiry for WooCommerce plugin for WordPress. Affected component: the plugin’s input handling/escaping allows unauthenticated Stored XSS. Vulnerable versions are ≤ 3.0; the issue is mitigated in version 3.1. The attack vector is network...

CVE-2023-26524

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

PT-2023-30572 · Woocommerce · Gravity Master Product Enquiry For Woocommerce

Name of the Vulnerable Software and Affected Versions: Gravity Master Product Enquiry for WooCommerce plugin versions = 3.0 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be stored on the server and executed when...

CVE-2023-26524

The CVE-2023-26524 entry concerns a CSRF vulnerability in the WordPress plugin Quiz And Survey Master (ExpressTech) , affecting versions up to 8.0.10 . The issue exposes a risk to unauthenticated users that could impact integrity, confidentiality, and availability as indicated by CVSS metrics (NV...

CVE-2023-26524 WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

WordPress Plugin Quiz And Survey Master Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2023:4390-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4390-1 advisory. Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack bsc1215157 Bugs fixed: - Fix optimizationorder opt to...

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection

Software Master Slider Pro Type Plugin Vulnerable versions = 3.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-47507 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 6df26bc223e4 Credits Rafie Muhammad Patchstack Required...

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL Injection

Software Master Slider Pro Type Plugin Vulnerable versions = 3.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-47506 Patch priority High CVSS severity High 7.6 Developer Claim ownership PSID c8ae4f7ba318 Credits Rafie Muhammad Patchstack Required privilege...

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)

Software Master Slider Pro Type Plugin Vulnerable versions = 3.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47508 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 7401df79a69d Credits Rafie Muhammad Patchstack Required...

master-concept.de Improper Access Control vulnerability OBB-3773694

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-5925

A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed to the public...

CVE-2023-46927

GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gfisomusecompactsize gpac/src/isomedia/isomwrite.c:3403:3 in gpac/MP4Box...

CVE-2023-46928

GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gfmediachangepl /afltest/gpac/src/mediatools/isomtools.c:3293:42...

CVE-2023-46931

GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmxparsesidedata /afltest/gpac/src/filters/ffdmx.c:202:14 in gpac/MP4Box...

CVE-2023-47096

A Reflected Cross-Site Scripting XSS vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field...

CVE-2023-47096

A Reflected Cross-Site Scripting XSS vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field...