81 matches found
PT-2023-30640 · Qode Interactive · Qode Essential Addons
Name of the Vulnerable Software and Affected Versions: Qode Essential Addons versions 1.5.2 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability. This vulnerability affects Qode Interactive Qode Essential Addons, allowing for co...
Qode Essential Addons < 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Description The Qode Essential Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the installplugin function in all versions up to, and including, 1.5.2. This makes it possible for authenticated attackers, with subscriber-level acce...
Exploit for Code Injection in Qodeinteractive Qode_Essential_Addons
CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Aut...
WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)
Software Qode Essential Addons Type Plugin Vulnerable versions = 1.5.2 Fixed in 1.5.3 OWASP Top 10 A1: Broken Access Control Classification Remote Code Execution RCE CVE CVE-2023-47840 Patch priority High CVSS severity High 9.9 Developer Qode Interactive PSID 08030749500a Credits Brandon Roldan...
CVE-2023-47680
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Qode Interactive Qi Addons For Elementor plugin = 1.6.3 versions...
CVE-2023-47680
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Qode Interactive Qi Addons For Elementor plugin = 1.6.3 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Qode Interactive Qi Addons For Elementor plugin = 1.6.3 versions...
CVE-2023-47680
CVE-2023-47680 affects the WordPress plugin Qi Addons For Elementor by Qode Interactive, with a Stored XSS in versions <= 1.6.3 when exploited by users with contributor privileges. The issue stems from insufficient validation/escaping of parameters in the contributor+ workflow. Patchstack indi...
WordPress Qi Addons For Elementor Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)
Software Qi Addons For Elementor Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47680 Patch priority Low CVSS severity Low 6.5 Developer Qode Interactive PSID dee29da77c21 Credits Rafie Muhammad...
CVE-2023-40333
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...
CVE-2023-40333
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...
CVE-2023-40333 WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...
CVE-2023-40333
CVE-2023-40333 refers to unauthenticated, reflected XSS in the WordPress Bridge Core plugin ( 3.0.9 (i.e., 3.1.0 or later). NVD lists a base score around 6.1 (Medium) with network attack vector and user interaction required. Patchstack also notes the fix in 3.1.0 and labels the vulnerability as X...
PT-2023-27392 · Qode Interactive · Qode Interactive Bridge Core Plugin
Name of the Vulnerable Software and Affected Versions: Qode Interactive Bridge Core plugin versions = 3.0.9 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for the execution of malicious scripts on a user's browser,...
Open Redirect Bug in Bridge Theme Plugin Opens Admins to Spearphishing
Two open-redirect vulnerabilities in Bridge, a commercial WordPress theme purchased more than 120,000 times, would allow an attacker to mount spearphishing attacks against site administrators. An open redirect vulnerability can be used to hide malicious links behind URLs for legitimate domains. F...
Nokia Symbian 60 3rd Edition Browser Denial of Service Crash
Exploit for hardware platform in category dos / poc ============================================================ Nokia Symbian 60 3rd Edition Browser Denial of Service Crash ============================================================ function crash alert'Nokia Browser Crash by Qode'; shellcode =...
nokiacrash.txt
function crash alert'Nokia Browser Crash by Qode'; shellcode = unescape'%ucccc'; fill = unescape'%ucccc'; addr = 0x02020202; var b = fill; while b.length Nokia Browser Crash by Qode...
Nokia Symbian 60 3rd Edition Browser Denial of Service Crash
No description provided by source. !-- Nokia Browser Crash by Qode http://www.qode.org -- htmlbodyscript function crash alert'Nokia Browser Crash by Qode'; shellcode = unescape'%ucccc'; fill = unescape'%ucccc'; addr = 0x02020202; var b = fill; while b.length = 0x400000 b+=b; /script Nokia Browser...
Nokia Symbian 60 3rd Edition - Browser Crash (Denial of Service)
function crash alert'Nokia Browser Crash by Qode'; shellcode = unescape'%ucccc'; fill = unescape'%ucccc'; addr = 0x02020202; var b = fill; while b.length Nokia Browser Crash by Qode milw0rm.com 2006-08-13...