Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS vulnerability in Poporon Pz-LinkCard plugin = 2.4.8 versions...

Pz-LinkCard <= 2.5.1 - Caching Management via CSRF

Description The plugin does not have CSRF checks when managing the caching feature, which could allow attackers to make logged in admin perform unwanted actions via CSRF attacks...

CVE-2023-47790 WordPress Pz-LinkCard Plugin <= 2.4.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS vulnerability in Poporon Pz-LinkCard plugin = 2.4.8 versions...

CVE-2023-47790

CVE-2023-47790 affects the WordPress plugin Pz-LinkCard (Poporon) and is caused by missing CSRF checks that enable a CSRF attack to trigger XSS in vulnerable versions. Public details indicate vulnerable versions include ≤ 2.5.2 (with older references listing ≤ 2.4.8) and that a fixed release is a...

WordPress Plugin Pz-LinkCard Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-30611

Name of the Vulnerable Software and Affected Versions Poporon Pz-LinkCard plugin versions prior to 2.4.9 Description The issue is related to a Cross-Site Request Forgery CSRF that can lead to Cross-Site Scripting XSS. This means an attacker could potentially trick a user into performing unintende...

CVE-2023-47790: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS vulnerability in Poporon Pz-LinkCard plugin = 2.4.8 versions...

WordPress Pz-LinkCard Plugin <= 2.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Pz-LinkCard Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.5.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47790 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1f315cc56e29 Credits Le Ngoc Anh...

pz-service.de Cross Site Scripting vulnerability OBB-2720257

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Pz-LinkCard plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

CVE-2021-25012

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25012

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25012

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

Cross site scripting

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25012

CVE-2021-25012 affects the WordPress Pz-LinkCard plugin up to version 2.4.4.4. The root cause is failure to sanitise/escape multiple parameters before returning them in admin dashboard pages, resulting in Reflected Cross-Site Scripting (XSS). Impact is reflected XSS in admin UI where untrusted in...

CVE-2021-25012 Pz-LinkCard <= 2.4.4.4 - Reflected Cross-Site Scripting

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

PT-2022-9569

Name of the Vulnerable Software and Affected Versions Pz-LinkCard WordPress plugin versions prior to 2.4.4.5 Description The issue is related to Reflected Cross-Site Scripting, where multiple parameters are not properly sanitised and escaped before being outputted in admin dashboard pages...

WordPress plugin Pz-LinkCard 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

CVE-2021-25012: Improper Neutralization of Input During Web Page Generation

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

WordPress Pz-LinkCard plugin <= 2.4.5.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Pz-LinkCard plugin versions = 2.4.5.2. Solution Update the WordPress Pz-LinkCard plugin to the latest available version at least 2.4.5.3...