EUVD-2024-51598

Malicious code in bioql PyPI...

CVE-2024-13433

The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-13433 Utilities for MTG <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-13433 Utilities for MTG <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-13433

CVE-2024-13433 affects the Utilities for MTG WordPress plugin. The vulnerability is Stored Cross-Site Scripting via the mtglink shortcode in all versions up to 1.4.1, triggered by authenticated users with contributor-level access and above. The available documents confirm the affected plugin/vers...

WordPress plugin Utilities for MTG 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

mtg-jp.com Cross Site Scripting vulnerability OBB-3582156

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mtg-jp.com Cross Site Scripting vulnerability OBB-3537014

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

airtestproject (>=0.1.0 <=0.1.2), centercitypcs-utils (>=0.2.0 <=0.2.6) +22 more potentially affected by CVE-2017-5992 via openpyxl (>=1.1.0 <=2.4.11)

openpyxl PYPI version =1.1.0, =0.1.0, =0.2.0, =0.9.2, =3.1.10, =0.8.2, =0.2.0, =2.0.2, =0.260128.9, =1.3.0, =4.2.1, =0.1.0, =0.9.0, =0.10.1 and more Source cves: CVE-2017-5992 Source advisory: OSV:GHSA-CHQF-HX79-GXC6...

Life Counter for MTG - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Life Counter for MTG published at the 'play' market has multiple vulnerabilities...