EUVD-2013-1901

Malware in sbrugna...

CVE-2024-37931 WordPress Point theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creativthemes Point point allows Cross Site Request Forgery.This issue affects Point: from n/a through = 1.1...

CVE-2024-37931

CVE-2024-37931 is a CSRF vulnerability in Creativthemes Point WordPress plugin/theme, affecting Point: n/a through 1.1. The CVSS data indicates an external (NETWORK) attack vector, with no privileges required and user interaction needed. The connected enrichment references the same CSRF issue (Wo...

CVE-2024-37931 WordPress Point theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creativthemes Point allows Cross Site Request Forgery.This issue affects Point: from n/a through 1.1...

WordPress Point theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Point versions = 1.1...

WordPress Point Theme <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Point Type Theme Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37931 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7886c1ba47d8 Credits Dhabaleshwar Das Required privileg...

CVE-2013-1905

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1905

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1905

The CVE-2013-1905 entry corresponds to a real XSS vulnerability in the Zero Point Drupal theme (7.x-1.x) prior to version 7.x-1.9. The issue arises because the theme does not escape user-supplied text, enabling remote attackers to inject arbitrary script/HTML via untrusted input (e.g., in URLs). ...