17 matches found
EUVD-2023-50826
Malicious code in bioql PyPI...
CVE-2023-46624
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...
CVE-2024-9383
The Parcel Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 1.8.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...
CVE-2024-9383 Parcel Pro <= 1.8.4 - Reflected Cross-Site Scripting
The Parcel Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 1.8.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...
WordPress plugin Parcel Pro 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
WordPress Parcel Pro plugin <= 1.8.4 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Parcel Pro versions = 1.8.4...
WordPress Parcel Pro Plugin <= 1.8.4 is vulnerable to Cross Site Scripting (XSS)
Software Parcel Pro Type Plugin Vulnerable versions = 1.8.4 Fixed in 1.9.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9383 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 434032076e56 Credits vgo0 Required privilege...
WooCommerce Parcel Pro < 1.6.12 - Cross-Site Request Forgery
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2023-46624
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...
CVE-2023-46624
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...
Open redirect
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...
CVE-2023-46624 WordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...
CVE-2023-46624
CVE-2023-46624 - Open Redirect in Parcel Pro (WordPress plugin) Affected software: Parcel Pro (WordPress plugin) up to version 1.6.11. Root cause/impact: Open Redirect via a redirect URL parameter or similar flow, enabling redirection to an untrusted site. Exploit status: Unauthenticated exploita...
CVE-2023-46624 WordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...
WordPress Plugin Parcel Pro Input Validation Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabilit...
Parcel Pro < 1.6.12 - Open Redirect
Description The plugin does not validate the redirect parameter before redirecting the user to its value, leading to an Open Redirect issue...
WordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection
Software Parcel Pro Type Plugin Vulnerable versions = 1.6.11 Fixed in 1.6.12 OWASP Top 10 A6: Security Misconfiguration Classification Open Redirection CVE CVE-2023-46624 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 4e771fcd1ecb Credits Nguyen Xuan Chien Required...