12 matches found
EUVD-2024-34218
Malicious code in bioql PyPI...
CVE-2024-11338
The PIXNET Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtm' and 'venue' parameters in all versions up to, and including, 2.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-lev...
WordPress PIXNET plugin <= 2.9.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin PIXNET versions = 2.9.10...
CVE-2024-11338
The PIXNET Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtm' and 'venue' parameters in all versions up to, and including, 2.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-lev...
CVE-2024-11338 PIXNET Plugin <= 2.9.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
The PIXNET Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtm' and 'venue' parameters in all versions up to, and including, 2.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-lev...
CVE-2024-11338
CVE-2024-11338 concerns the PIXNET Plugin for WordPress. The Wordfence entry lists Stored Cross-Site Scripting via the gtm and venue params in all versions up to 2.9.10 (authenticated Subscriber+). No public technical details beyond this are provided in connected documents. RedHat/Red Hat advisor...
CVE-2024-11338 PIXNET Plugin <= 2.9.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
The PIXNET Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtm' and 'venue' parameters in all versions up to, and including, 2.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-lev...
WordPress plugin PIXNET Plugin 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
everbrightsky.pixnet.net XSS vulnerability
Open Bug Bounty ID: OBB-694882 Description| Value ---|--- Affected Website:| everbrightsky.pixnet.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...
bluesky40839.pixnet.net XSS vulnerability
Open Bug Bounty ID: OBB-694773 Description| Value ---|--- Affected Website:| bluesky40839.pixnet.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
ishapon.events.pixnet.net XSS vulnerability
Open Bug Bounty ID: OBB-671734 Description| Value ---|--- Affected Website:| ishapon.events.pixnet.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
pixnet.net XSS vulnerability
Vulnerable URL: https://www.pixnet.net/blog Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 93 Google Pagerank| 7 VIP website status:| Yes Check pixnet.net SSL connection:| Grade: A...