29 matches found
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PropertyHive plugin = 1.5.48 versions...
CVE-2023-22706 WordPress PropertyHive Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PropertyHive plugin = 1.5.48 versions...
PT-2023-18649 · WordPress · Propertyhive
Name of the Vulnerable Software and Affected Versions: PropertyHive plugin versions 1.5.48 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing th...
WordPress PropertyHive Plugin <= 1.5.52 is vulnerable to Cross Site Scripting (XSS)
Software PropertyHive Type Plugin Vulnerable versions = 1.5.52 Fixed in 1.5.53 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-22706 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b9faa8c10632 Credits Nguyen Xuan Chien...
CVE-2023-29172
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PropertyHive plugin = 1.5.46 versions...
WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS)
Software PropertyHive Type Plugin Vulnerable versions = 1.5.46 Fixed in 1.5.47 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29172 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1f09421dbd25 Credits minhtuanact Requir...
Hardcoded credentials
The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...
