Fedora: Security Advisory (FEDORA-2024-053b8330a1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-8734 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a use-after-free vulnerability in the AcroForm component of Foxit PDF Reader and Foxit PDF Editor. This...

CVE-2024-39652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39652

CVE-2024-39652 concerns WooCommerce PDF Vouchers (WPWooCommerce PDF Vouchers plugin). A Reflected Cross-Site Scripting (XSS) vulnerability exists in versions prior to 4.9.5, enabling an attacker to inject or reflect script via input during web page generation. Public sources (NVD, Patchstack, Red...

CVE-2024-39652 WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39652 WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WooCommerce PDF Vouchers versions 4.9.5...

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WooCommerce PDF Vouchers versions 4.9.5...

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities

Unauthenticated Multiple Vulnerabilities discovered by Dave Jong Patchstack in WordPress Plugin WooCommerce PDF Vouchers versions 4.9.5...

CVE-2024-6687

CVE-2024-6687 affects the WordPress plugin CTT Expresso para WooCommerce (versions ≤ 3.2.12). The flaw exposes sensitive data via /wp-content/uploads/cepw, where generated .pdf and log files containing sender/receiver names, phone numbers, physical addresses, and email addresses are publicly acce...

WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Arbitrary File Deletion

Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-39651 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 7c83b156fb00 Credits Dave Jong Patchsta...

WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Multiple Vulnerabilities

Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Broken Access Control Classification Multiple Vulnerabilities CVE CVE-2024-39650 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 7f3355fc5345 Credits Dave Jong...

PT-2024-28590

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Vouchers versions prior to 4.9.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations Fo...

WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39652 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4bf7ebebf09d Credits Dave Jong Patchstack...

WordPress plugin WooCommerce PDF Vouchers 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2024-37799 · WordPress · Ctt Expresso Para Woocommerce

Name of the Vulnerable Software and Affected Versions: CTT Expresso para WooCommerce plugin for WordPress versions up to and including 3.2.12 Description: The issue concerns the exposure of sensitive information in the CTT Expresso para WooCommerce plugin for WordPress. This exposure occurs via t...

The vulnerability of the Roundup error detection system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Roundup error detection system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by downloading specially created malicious PDF, XML, and SVG files...

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

openSUSE Security Advisory (SUSE-SU-2024:2627-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...