EUVD-2024-44344

Malicious code in bioql PyPI...

EUVD-2024-40239

Malicious code in bioql PyPI...

WordPress Propovoice plugin <= 1.7.6.7 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by mikemyers in WordPress Plugin Propovoice CRM versions = 1.7.6.7...

CVE-2024-43350

Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4...

CVE-2024-4747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue affects Propovoice CRM: from n/a through 1.7.6.2...

CVE-2024-43350

Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4...

CVE-2024-43350 WordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4...

CVE-2024-43350

CVE-2024-43350 – Propovoice Propovoice CRM affects Propovoice CRM for WordPress (versions n/a through 1.7.6.4). The connected documents describe an ."Authorization Bypass Through User-Controlled Key" vulnerability (also framed as an unauthenticated Insecure Direct Object Reference) in this plugin...

CVE-2024-43350 WordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4...

PT-2024-30518

Name of the Vulnerable Software and Affected Versions Propovoice CRM versions 1.7.6.4 and earlier Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability may be exploited through an Insecure Direct Object Reference IDOR. There is n...

CVE-2024-43350: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4...

WordPress Propovoice CRM plugin <= 1.7.8 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Manab Jyoti Dowarah Patchstack Alliance in WordPress Plugin Propovoice CRM versions = 1.7.8...

WordPress Propovoice CRM Plugin <= 1.7.6.4 is vulnerable to Insecure Direct Object References (IDOR)

Software Propovoice CRM Type Plugin Vulnerable versions = 1.7.6.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-43350 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8abb6e22f372 Credits Manab Jyoti...

CVE-2024-4747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue affects Propovoice CRM: from n/a through 1.7.6.2...

WordPress plugin Propovoice CRM 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

CVE-2024-4747: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue affects Propovoice CRM: from n/a through 1.7.6.2...

CVE-2024-4747 WordPress Propovoice CRM plugin <= 1.7.6.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue affects Propovoice CRM: from n/a through 1.7.6.2...

CVE-2024-4747

CVE-2024-4747 affects Propovoice: All-in-One Client Management System (Propovoice CRM) for WordPress. Unauthenticated stored cross-site scripting vulnerability present in Propovoice CRM versions up to 1.7.6.2. A fix/patch has been issued (patched in the Wordfence entry); affected users should upd...

CVE-2024-4747 WordPress Propovoice CRM plugin <= 1.7.6.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue affects Propovoice CRM: from n/a through 1.7.6.2...

PT-2024-32627

Name of the Vulnerable Software and Affected Versions Propovoice CRM versions 1.7.6.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...