544 matches found
CVE-2023-25980: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...
Malicious code in optimize-procurement-and-inventory-with-ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d4a974419b1ab87d44f6d1c5cfd7fac97f037b476328f114d344113cf6bbd6f The OpenSSF Package Analysis project identified 'optimize-procurement-and-inventory-with-ai' @ 6.1.8 npm as malicious. It is considered maliciou...
CVE-2023-4852
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
PT-2023-30861 · Ibos Oa · Ibos Oa
Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue affects the processing of the file ?r=dashboard/database/optimize, leading to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use...
CVE-2023-4852: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
IBOS SQL Injection Vulnerability
IBOS is a collaborative office management system from Shenzhen Boosi Xiechuang Network Technology Co. A SQL injection vulnerability exists in IBOS version 4.5.5, which originates from an SQL injection attack via the ?r=dashboard/database/optimize location...
Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-56537)
Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany, that uses discrete-event simulation to analyze and optimize throughput and thereby improve manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an out-of-bounds write...
Siemens Tecnomatix Plant Simulation Heap Buffer Overflow Vulnerability
Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany, that uses discrete-event simulation to analyze and optimize throughput and thereby improve manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from a heap buffer overflow...
Siemens Tecnomatix Plant Simulation Type Obfuscation Vulnerability
Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany, that uses discrete-event simulation to analyze and optimize throughput and thereby improve manufacturing system performance. A type confusion vulnerability exists in Siemens Tecnomatix Plant Simulation, whi...
WordPress WP-Optimize Plugin < 3.2.13 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wp-optimize:wp-optimize"; ifdescription...
CVE-2023-1119
The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability...
CVE-2023-1119
The WP-Optimize WordPress plugin (versions prior to 3.2.13 ) and the SrbTransLatin WordPress plugin (versions prior to 2.4.1 ) are vulnerable to Cross-Site Scripting (XSS) . The root cause is a third-party library that improperly handles HTML character escaping, removing necessary protections. Th...
PT-2023-16768 · WordPress · Wp-Optimize +1
Name of the Vulnerable Software and Affected Versions: WP-Optimize WordPress plugin versions prior to 3.2.13 SrbTransLatin WordPress plugin versions prior to 2.4.1 Description: The issue arises from the use of a third-party library that removes escaping on some HTML characters, leading to a...
CVE-2023-1119: Undefined Security Weakness
The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability...
WordPress WP-Optimize Plugin < 3.2.13 is vulnerable to Cross Site Scripting (XSS)
Software WP-Optimize Type Plugin Vulnerable versions 3.2.13 Fixed in 3.2.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1119 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 74a58d2a57e4 Credits Paolo Elia Required...
WordPress plugin WP-Optimize 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-25491
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Samuel Marshall JCH Optimize plugin = 3.2.2 versions...
CVE-2023-25491
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Samuel Marshall JCH Optimize plugin = 3.2.2 versions...
