11 matches found
CVE-2023-32958
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Nose Graze Novelist plugin = 1.2.0 versions...
WordPress Novelist plugin <= 1.2.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by timomangcut in WordPress Plugin Novelist versions = 1.2.3...
CVE-2025-30847 WordPress Novelist plugin <= 1.2.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashley Novelist novelist allows Stored XSS.This issue affects Novelist: from n/a through = 1.2.3...
Novelist < 1.2.3 - Cross-Site Request Forgery
Description The Novelist plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on the novelistrestoredefaultsettings function. This makes it possible for unauthenticated attackers to restore t...
CVE-2024-32093 WordPress Novelist plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Nose Graze Novelist.This issue affects Novelist: from n/a through 1.2.2...
WordPress Novelist plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Novelist versions = 1.2.2...
WordPress Novelist Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Novelist Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32093 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID a2c840335cd8 Credits Dhabaleshwar Das Required...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Nose Graze Novelist plugin = 1.2.0 versions...
CVE-2023-32958 WordPress Novelist Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Nose Graze Novelist plugin = 1.2.0 versions...
WordPress plugin Novelist 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Novelist Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Novelist Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.2.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32958 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 4ad5e6bd5dc3 Credits Emili Castells Required...