MAL-2025-31294 Malicious code in quick-code-balance-spy-java (npm)

The package quick-code-balance-spy-java was found to contain malicious code...

Malicious code in quick-code-balance-spy-java (npm)

The package quick-code-balance-spy-java was found to contain malicious code...

CVE-2024-7822

The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress Quick Code plugin <= 1.0 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Quick Code versions = 1.0...

CVE-2024-7822

The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-7822 Quick Code <= 1.0 - Stored XSS via CSRF

The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress plugin Quick Code 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in version 1.0...

WordPress Quick Code Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Quick Code Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7822 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 36a8829efbbf Credits Daniel Ruf Required privilege...