Pixel Update Bulletin—January 2022Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2022-01-05 or later address all issues in this bulletin and all issues in the January 2022 Android...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Pixel Display/graphics in Google Android, which arises from a configuration or other error in the operation of a networked system or product. An attacker could exploit the vulnerability to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Pixel Display/graphics in Google Android 11, which stems from a configuration error in the network system or product during operation. An attacker could exploit the vulnerability to...

WordPress Pixel Cat plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers. Pixel Cat Plugin is a WordPress open source application plugin. WordPress Pixel Cat Plugins has a cross-site reques...

CVE-2021-24972

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24922

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks...

CVE-2021-24972

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24922

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks...

CVE-2021-24972

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24922

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks...

Cross site scripting

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

Cross site scripting

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks...

CVE-2021-24972 Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site Scripting

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24972

The CVE-2021-24972 entry relates to the WordPress Pixel Cat plugin (Pixel Cat Lite) prior to version 2.6.3, where certain settings are not escaped. This can allow a high-privilege user to perform Stored Cross-Site Scripting even when unfiltered_html is disallowed. The vulnerability is described a...

CVE-2021-24922

The CVE-2021-24922 entry pertains to the Pixel Cat WordPress plugin, affected version(s) prior to 2.6.2. The vulnerability arises because the plugin does not perform CSRF validation when saving settings and fails to adequately sanitise/escape some inputs, enabling an attacker to leverage a logged...

CVE-2021-24922 Pixel Cat Lite < 2.6.2 - CSRF to Stored Cross-Site Scripting

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks...

WordPress 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. The WordPress plugin suffers from a cross-sit...

PT-2021-16389

Name of the Vulnerable Software and Affected Versions: Pixel Cat WordPress plugin versions prior to 2.6.3 Description: The issue allows high privilege users to perform Cross-Site Scripting attacks, even when the unfiltered html is disallowed, due to the plugin not escaping some of its settings...

PT-2021-16368

Name of the Vulnerable Software and Affected Versions: Pixel Cat WordPress plugin versions prior to 2.6.2 Description: The issue concerns a lack of CSRF check when saving settings and inadequate sanitization and escaping of certain settings in the Pixel Cat WordPress plugin. This could allow an...

CVE-2021-24972: Improper Neutralization of Input During Web Page Generation

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...