CVE-2023-40204 WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager.This issue affects Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager: from n/a through 2.9.2...

CVE-2023-40204

CVE-2023-40204 (WordPress Folders plugin) : Unrestricted Upload of File with Dangerous Type in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager. Affected versions: plugin 2.9.2, specifically 2.9.3 or later, as cited by Patchstack. Additional context...

PT-2023-27322 · WordPress · Premio Folders

Name of the Vulnerable Software and Affected Versions: Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager versions n/a through 2.9.2 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Premio Folde...

CVE-2023-47759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty plugin = 3.1.2 versions...

CVE-2023-47759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty chaty allows DOM-Based XSS.This issue affects Chaty: from n/a through = 3.1.2...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty plugin = 3.1.2 versions...

CVE-2023-47759

CVE-2023-47759 describes a Cross-Site Scripting (XSS) issue in the Premio Chaty WordPress plugin, affecting versions

PT-2023-30592 · Premio · Premio Chaty Plugin

Name of the Vulnerable Software and Affected Versions: Premio Chaty plugin versions = 3.1.2 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For Premio Chaty plugin versions = 3.1.2, update t...

CVE-2023-25019

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

CVE-2023-25019

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

CVE-2023-25019 WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

CVE-2023-25019

The CVE-2023-25019 entry concerns the Premio Chaty WordPress plugin. Affected software: Chaty plugin versions up to and including 3.0.9. Vulnerable component: input handling in the plugin that enables unauthenticated, reflected Cross‑Site Scripting (XSS). Root cause and impact are described as un...

PT-2023-19869 · Premio · Premio Chaty Plugin

Name of the Vulnerable Software and Affected Versions: Premio Chaty plugin versions 3.0.9 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal...

WordPress Premio Chaty Plugin < 2.8.4 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Prize Chaty plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Premio Chaty plugin 2.8.3 and earlier versions contain a cross-site scripting vulnerability that can be exploited by an...

CVE-2021-36846

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

CVE-2021-36846

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

Cross site scripting

Authenticated admin or higher user role Stored Cross-Site Scripting XSS vulnerability in Premio Chaty WordPress plugin = 2.8.3...

CVE-2021-36846

CVE-2021-36846 affects the WordPress Premio Chaty plugin; authenticated users (admin+) can store XSS in plugin settings. Public details cite versions &lt;= 2.8.3 (and OpenVAS reference to