WordPress Preferred Languages Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Preferred Languages Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35644 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 719b6e177f68 Credits Jayden Caelli ret2desync Required...

CVE-2024-23328 The Dataease datasource exists deserialization and arbitrary file read vulnerability

Dataease is an open source data visualization analysis tool. A deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The location of the vulnerability code is core/core-backend/src/main/java/io/dataease/datasource/type/Mysql.java. The...