EUVD-2013-1901

Malware in sbrugna...

CVE-2024-37931 WordPress Point theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creativthemes Point point allows Cross Site Request Forgery.This issue affects Point: from n/a through = 1.1...

CVE-2024-37931 WordPress Point theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creativthemes Point allows Cross Site Request Forgery.This issue affects Point: from n/a through 1.1...

CVE-2024-37931

CVE-2024-37931 is a CSRF vulnerability in Creativthemes Point WordPress plugin/theme, affecting Point: n/a through 1.1. The CVSS data indicates an external (NETWORK) attack vector, with no privileges required and user interaction needed. The connected enrichment references the same CSRF issue (Wo...

WordPress Point theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Point versions = 1.1...

WordPress Point Theme <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Point Type Theme Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37931 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7886c1ba47d8 Credits Dhabaleshwar Das Required privileg...

Cross site scripting

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1905

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1905

The CVE-2013-1905 entry corresponds to a real XSS vulnerability in the Zero Point Drupal theme (7.x-1.x) prior to version 7.x-1.9. The issue arises because the theme does not escape user-supplied text, enabling remote attackers to inject arbitrary script/HTML via untrusted input (e.g., in URLs). ...

CVE-2013-1905

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...