Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/05 12:00 a.m.•5 views

CVE-2024-24866: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Reflected XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo: from n/a through 2.2.24...

7.1CVSS5.8AI score0.0037EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/29 12:00 a.m.•8 views

CVE-2023-6278: Improper Neutralization of Input During Web Page Generation

The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and escape the biteshiperror and biteshipmessage parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high...

6.1CVSS5.8AI score0.0037EPSS
SaveExploits2References2
NVD
NVD
•added 2023/12/15 4:15 p.m.•33 views

CVE-2023-49767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Stored XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo: from n/a through 2.2.24...

5.9CVSS0.00394EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/15 3:19 p.m.•107 views

CVE-2023-49767

CVE-2023-49767 affects WordPress plugin Biteship (Ongkos Kirim Kurir Instant, Reguler, Kargo). A Stored XSS vulnerability exists in versions up to 2.2.24 (patched in 2.2.28). Exploitation requires authenticated access by Shop Manager or higher, enabling stored script execution via plugin settings...

5.9CVSS6.6AI score0.00394EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/15 12:00 a.m.•6 views

PT-2023-31337

Name of the Vulnerable Software and Affected Versions Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo versions n/a through 2.2.24 Description The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means...

5.9CVSS5.7AI score0.00394EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•5 views

CVE-2023-49767: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Stored XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo: from n/a through 2.2.24...

5.9CVSS5.6AI score0.00394EPSS
SaveExploits0References2
Rows per page
Query Builder