Lucene search
+L

602 matches found

CVE
CVE
added 2024/03/27 12:59 p.m.62 views

CVE-2024-29770

CVE-2024-29770 — Reflected XSS in Pretty Links Shortlinks (Shortlinks by Pretty Links). Affected: Shortlinks plugin up to 3.6.2. Root cause: improper neutralization of input during web page generation. Impact: Low confidentiality, integrity, and availability impact per the CVSS; exploitation requ...

7.1CVSS8.6AI score0.00418EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/27 12:59 p.m.13 views

CVE-2024-29770 WordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pretty Links Shortlinks by Pretty Links allows Reflected XSS.This issue affects Shortlinks by Pretty Links: from n/a through 3.6.2...

7.1CVSS7AI score0.00418EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/27 12:0 a.m.11 views

PT-2024-23012 · Unknown · Shortlinks By Pretty Links

Name of the Vulnerable Software and Affected Versions: Shortlinks by Pretty Links versions n/a through 3.6.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...

7.1CVSS9.3AI score0.00418EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.14 views

WordPress Plugin Pretty Links 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.1CVSS7AI score0.00418EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/03/25 12:0 a.m.18 views

WordPress Shortlinks by Pretty Links Plugin <= 3.6.2 is vulnerable to Cross Site Scripting (XSS)

Software Shortlinks by Pretty Links Type Plugin Vulnerable versions = 3.6.2 Fixed in 3.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29770 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b1b0efcde695 Credits Rafie Muhammad...

7.1CVSS6.8AI score0.00418EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/03/23 4:15 a.m.6 views

CVE-2024-2326

The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possibl...

4.3CVSS7.2AI score0.0021EPSS
Exploits0References2
NVD
NVD
added 2024/03/23 4:15 a.m.23 views

CVE-2024-2326

The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possibl...

4.3CVSS4.3AI score0.0021EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/23 3:33 a.m.12 views

CVE-2024-2326 Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update

The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possibl...

4.3CVSS7.1AI score0.0021EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/23 3:33 a.m.27 views

CVE-2024-2326 Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update

The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possibl...

4.3CVSS4.6AI score0.0021EPSS
Exploits0References2
CVE
CVE
added 2024/03/23 3:33 a.m.62 views

CVE-2024-2326

CVE-2024-2326 refers to the WordPress plugin “Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing”. The Red Hat/NVD/ PatchStack entries confirm a CSRF vulnerability in all versions up to and including 3.6.3 caused by missing or incorrect nonce validation when saving plugin se...

4.3CVSS8.9AI score0.0021EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/23 12:0 a.m.5 views

WordPress Plugin Pretty Links 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.3CVSS8.1AI score0.0021EPSS
Exploits0References3
WPVulnDB
WPVulnDB
added 2024/03/22 12:0 a.m.19 views

Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing < 3.6.4 - Plugin Settings Update via CSRF

Description The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin is vulnerable to Cross-Site Request Forgery. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated attackers to change the plugin'...

4.3CVSS6.5AI score0.0021EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/22 12:0 a.m.8 views

PT-2024-19754 · WordPress · Pretty Links – Affiliate Links

Name of the Vulnerable Software and Affected Versions: The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress versions up to, and including, 3.6.3 Description: The issue is due to missing or incorrect nonce validation when saving plugin settings,...

4.3CVSS9.4AI score0.0021EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2024/02/23 12:0 a.m.22 views

Fedora: Security Advisory for rust-pretty-git-prompt (FEDORA-2024-993d3a78dd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.01546EPSS
Exploits0References2
Fedora
Fedora
added 2024/02/22 2:43 a.m.17 views

[SECURITY] Fedora 38 Update: rust-pretty-git-prompt-0.2.1-20.fc38

Your current git repository information inside a beautiful shell prompt...

9.8CVSS9.4AI score0.01546EPSS
Exploits0
Fedora
Fedora
added 2024/02/20 1:40 a.m.37 views

[SECURITY] Fedora 39 Update: rust-pretty-git-prompt-0.2.1-20.fc39

Your current git repository information inside a beautiful shell prompt...

9.8CVSS7.1AI score0.01546EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/02/20 12:0 a.m.21 views

Fedora: Security Advisory for rust-pretty-git-prompt (FEDORA-2024-8ba389815f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.01546EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/12 12:0 a.m.5 views

Gentoo Portage Security Vulnerability

Gentoo is an open source Linux system from the Gentoo Foundation. A security vulnerability exists in Gentoo Portage versions prior to 3.0.47, which stems from a lack of PGP validation for code execution...

9.8CVSS7.3AI score0.00464EPSS
Exploits0References4
OSV
OSV
added 2023/12/19 2:15 p.m.3 views

DEBIAN-CVE-2023-50762

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. This is because the text was interpreted as a MIME message and the first paragraph was always treated as an email header section. A digitally signed text from a...

4.3CVSS5.4AI score0.00633EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2023/11/23 9:6 a.m.14 views

prettywildseeds.co.uk Cross Site Scripting vulnerability OBB-3790889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.3AI score
Exploits0
Rows per page
Query Builder