Lucene search
K

7 matches found

OSV
OSV
added 2023/11/13 4:15 a.m.0 views

CVE-2023-46634

Cross-Site Request Forgery CSRF vulnerability in phoeniixx Custom My Account for Woocommerce allows Cross-Site Scripting XSS.This issue affects Custom My Account for Woocommerce: from n/a through 2.1...

6.1CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/11/13 4:15 a.m.9 views

CVE-2023-46634

Cross-Site Request Forgery CSRF vulnerability in phoeniixx Custom My Account for Woocommerce allows Cross-Site Scripting XSS.This issue affects Custom My Account for Woocommerce: from n/a through 2.1...

7.1CVSS0.00064EPSS
Exploits0References1
Prion
Prion
added 2023/11/13 4:15 a.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in phoeniixx Custom My Account for Woocommerce allows Cross-Site Scripting XSS.This issue affects Custom My Account for Woocommerce: from n/a through 2.1...

5.8CVSS6.8AI score0.00064EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/13 4:2 a.m.63 views

CVE-2023-46634

CVE-2023-46634 concerns a CSRF flaw in the WordPress plugin Custom My Account for Woocommerce (phoeniixx) affecting versions up to 2.1, leading to Cross‑Site Scripting (XSS). Documents confirm the vulnerability and affected product but do not provide explicit fix/version details or exploitation s...

7.1CVSS7AI score0.00064EPSS
Exploits0References1Affected Software1
wpexploit
wpexploit
added 2020/04/11 12:0 a.m.9 views

Support Ticket System By Phoeniixx <= 2.7 - Unauthenticated Reflected XSS

Bad user input sanitisation leads to unauthenticated reflected XSS. Edit WPScanTeam: January 27th, 2020 - Report received & WP Plugin team notified January 31st, 2020 - WP plugin team acknowledgement & plugin closed. April 11th, 2020 - No updates, disclosing...

0.9AI score
Exploits0
WPVulnDB
WPVulnDB
added 2020/04/11 12:0 a.m.13 views

Support Ticket System By Phoeniixx <= 2.7 - Unauthenticated Reflected XSS

Bad user input sanitisation leads to unauthenticated reflected XSS. Edit WPScanTeam: January 27th, 2020 - Report received & WP Plugin team notified January 31st, 2020 - WP plugin team acknowledgement & plugin closed. April 11th, 2020 - No updates, disclosing. PoC...

Exploits0Affected Software1
Patchstack
Patchstack
added 2020/04/11 12:0 a.m.7 views

WordPress Support Ticket System By Phoeniixx <= 2.7 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered Max in WordPress Support Ticket System By Phoeniixx versions = 2.7. Solution This plugin has been closed as of January 31, 2020 and is not available for download. Reason: Security Issue...

2.8AI score
Exploits0References1Affected Software1
Rows per page
Query Builder