10 matches found
EUVD-2024-34534
Malicious code in bioql PyPI...
CVE-2024-33954
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atanas Yonkov Pliska allows Stored XSS.This issue affects Pliska: from n/a through 0.3.5...
CVE-2024-33954
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atanas Yonkov Pliska allows Stored XSS.This issue affects Pliska: from n/a through 0.3.5...
WordPress plugin Pliska 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Pliska < 0.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Display Name
Description The Pliska theme for WordPress is vulnerable to Stored Cross-Site Scripting via author display names in all versions up to, and including, 0.3.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...
CVE-2024-33954 WordPress Pliska theme <= 0.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atanas Yonkov Pliska allows Stored XSS.This issue affects Pliska: from n/a through 0.3.5...
CVE-2024-33954 WordPress Pliska theme <= 0.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atanas Yonkov Pliska allows Stored XSS.This issue affects Pliska: from n/a through 0.3.5...
CVE-2024-33954
CVE-2024-33954 is a stored XSS in the WordPress theme Pliska up to version 0.3.5, caused by improper input neutralization during page generation. The issue affects the Pliska theme and has been patched in 0.3.5; upgrade to 0.3.5 or newer to remediate. If upgrading, verify the fix and review serve...
WordPress Pliska theme <= 0.3.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Pliska versions = 0.3.5...
WordPress Pliska Theme <= 0.3.5 is vulnerable to Cross Site Scripting (XSS)
Software Pliska Type Theme Vulnerable versions = 0.3.5 Fixed in 0.3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33954 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2f9fa4022d5c Credits stealthcopter Required privilege Contributor...