ALFA AIP-W512 安全漏洞

The ALFA AIP-W512 is a pocket-sized 11n wireless router from ALFA. A security vulnerability exists in the ALFA AIP-W512 version v3.2.2.2.3, which originates from a stack overflow in the targetAPMac parameter of the formWsc function...

CVE-2024-51681

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CodeRevolution WP Pocket URLs allows Stored XSS.This issue affects WP Pocket URLs: from n/a through 1.0.3...

CVE-2024-51681 WordPress WP Pocket URLs plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeRevolution WP Pocket URLs wp-pocket-urls allows Stored XSS.This issue affects WP Pocket URLs: from n/a through = 1.0.3...

WordPress plugin WP Pocket URLs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress WP Pocket URLs plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP Pocket URLs versions = 1.0.3...

WordPress WP Pocket URLs Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Pocket URLs Type Plugin Vulnerable versions = 1.0.3 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51681 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 80e05c72df93 Credits SOPROBRO Required privilege Contributor...

WordPress Pocket Widget plugin <= 0.1.3 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Pocket Widget versions = 0.1.3...

CVE-2024-7918

The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-7918

The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-7918 Pocket Widget <= 0.1.3 - Admin+ Stored XSS

The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-7918

The CVE-2024-7918 entry concerns the Pocket Widget WordPress plugin (versions up to 0.1.3). Connected sources confirm the underlying issue: the plugin does not sanitise or escape certain settings, enabling Stored Cross-Site Scripting (XSS) by high-privilege users (e.g., administrators) even when ...

CVE-2024-7918 Pocket Widget <= 0.1.3 - Admin+ Stored XSS

The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Pocket Widget Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Pocket Widget Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7918 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 132d6aa31a39 Credits Bob Matyas Required privileg...

WordPress plugin Pocket Widget 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-38685 · WordPress · Pocket Widget

Name of the Vulnerable Software and Affected Versions: Pocket Widget WordPress plugin version 0.1.3 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in multisite...

Friday Squid Blogging: 1994 Lair of Squid Game

I didnt know: In 1994, Hewlett-Packard released a miracle machine: the HP 200LX pocket-size PC. In the depths of the device, among the MS-DOS productivity apps built into its fixed memory, there lurked a first-person maze game called Lair of Squid. … In Lair of Squid, youre trapped in an underwat...

PT-2024-24536 · Agasta · Agasta Sanketlife 2.0 Pocket 12-Lead Ecg Monitor

Name of the Vulnerable Software and Affected Versions: Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor version 3.0 Description: The issue allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component. This is due to an insecure permission vulnerability...

CVE-2024-32368

Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component...

WordPress Pocket News Generator plugin <= 0.2.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Benedictus Jovan in WordPress Plugin Pocket News Generator versions = 0.2.0...

WordPress Pocket News Generator Plugin <= 0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Pocket News Generator Type Plugin Vulnerable versions = 0.2.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-2964 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ea8a99346fee Credits Benedictus Jovan...