EUVD-2022-50197

Malicious code in bioql PyPI...

CVE-2022-47435

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

CVE-2022-47435

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

CVE-2022-47435

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

CVE-2022-47435

CVE-2022-47435 affects WordPress plugin WP-OliveCart (Olive Design) ≤ 1.1.3. The flaw is a Stored XSS requiring admin privileges (admin+) and user interaction, with network attack vector and changed scope. Root cause per sources is inadequate sanitization/escaping of settings, enabling admins to ...

CVE-2022-47435: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

PT-2023-15311

Name of the Vulnerable Software and Affected Versions Olive Design WP-OliveCart plugin versions prior to 1.1.4 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. Recommendations For Olive Design WP-OliveCart plugin...

JVN#12124922: WEB SCHEDULE vulnerable to cross-site scripting

WEB SCHEDULE provided by Olive Design contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing the month parameter. Impact An artbitrary script may be executed on the user's web browser. Solution Do not use WEB SCHEDULE WEB SCHEDULE is no longer being developed or...