5055 matches found
CVE-2024-2508
CVE-2024-2508 affects the WordPress plugin WP Mobile Menu (versions up to 2.8.4.4). The vulnerability arises from a missing capability check in the save_menu_item_icon function, enabling unauthenticated attackers to modify data by adding the post meta key '_mobmenu_icon' with a crafted value on a...
CVE-2024-2508 WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification
The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...
WordPress WP Mobile Menu plugin <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification vulnerability
Missing Authorization to mobmenuicon Post Meta Modification vulnerability discovered by 1337Wannabe in WordPress Plugin WP Mobile Menu versions = 2.8.4.4...
CVE-2024-7277
A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be...
WordPress plugin WP Mobile Menu 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-20731 · WordPress · Wp Mobile Menu
Name of the Vulnerable Software and Affected Versions: WP Mobile Menu plugin for WordPress versions up to, and including, 2.8.4.4 Description: The issue allows unauthorized modification of data due to a missing capability check on the save menu item icon function. This makes it possible for...
WordPress WP Mobile Menu Plugin <= 2.8.4.4 is vulnerable to Broken Access Control
Software WP Mobile Menu Type Plugin Vulnerable versions = 2.8.4.4 Fixed in 2.8.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2508 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a69747222ff0 Credits 1337Wannabe Required privileg...
CVE-2024-7277: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be...
CVE-2024-2508: Missing Authorization
The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...
CVE-2024-7277 itsourcecode Alton Management System Add a Menu menu.php unrestricted upload
A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be...
itsourcecode Alton Management System 代码问题漏洞
itsourcecode Alton Management System is an online restaurant management system from itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode Alton Management System, which stems from an unrestricted file upload vulnerability in the image function of the /admin/menu.php of th...
July 30, 2024—KB5040529 (OS Build 26100.1301) Preview
None None...
CVE-2024-41808: Improper Neutralization of Input During Web Page Generation
The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uploaded in a given log. However, all versions of the platform through 0.9.1 do not sanitize user input in the filter selection menu, which may result in complete account takeover. ...
PT-2024-29574 · Dompurify +2 · Dompurify +2
Name of the Vulnerable Software and Affected Versions: OpenObserve versions through 0.9.1 Description: The OpenObserve open-source observability platform has a security issue where it does not sanitize user input in the filter selection menu, potentially leading to complete account takeover. The...
WordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Jayden Caelli - ret2desync Patchstack Alliance in WordPress Plugin Best Restaurant Menu by PriceListo versions = 1.4.1...
WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.1 is vulnerable to SQL Injection
Software Best Restaurant Menu by PriceListo Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-38793 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID e01346317df5 Credits Jayden Caelli ret2desync...
Setting vDisk Boot Menu as a Default Option
This article describes how to enable the first menu option as the default boot choice without prompting when vDisk boot menu appears. Background A Provisioning Services vDisk boot menu appears when the user is starting a provisioned Virtual Machine, but the user wants the Virtual Machine to start...
BIT-MEDIAWIKI-2024-40599
An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries...