CVE-2022-44739

Cross-Site Request Forgery CSRF vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin = 1.5.4 versions...

CVE-2022-44739

Cross-Site Request Forgery CSRF vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin = 1.5.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin = 1.5.4 versions...

CVE-2022-44739 WordPress Quick Restaurant Reservations Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin = 1.5.4 versions...

CVE-2022-44739

The CVE-2022-44739 entry concerns the WordPress ThingsForRestaurants Quick Restaurant Reservations plugin (versions ≤ 1.5.4) and describes a Cross-Site Request Forgery (CSRF) vulnerability. The cited sources consistently indicate CSRF as the flaw, enabling an attacker to trick authenticated users...

WordPress Plugin Quick Restaurant Reservations: Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2022-44739: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin = 1.5.4 versions...

vacavillequicklane.com Cross Site Scripting vulnerability OBB-3355540

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Quick Page/Post Redirect Plugin <= 5.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Quick Page/Post Redirect Type Plugin Vulnerable versions = 5.2.3 Fixed in 5.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25063 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 28b05154c93f Credits Justiice...

CVE-2023-31497

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...

Improper access control

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...

CVE-2023-31497

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...

CVE-2023-31497

CVE-2023-31497 affects Seqrite Endpoint Security (EPS) from Quick Heal Technologies Limited, with all versions prior to 8.0 vulnerable to local privilege escalation to root via a crafted binary. The Red Hat/NVD/PT reports confirm a root-priority impact (privilege escalation) through incorrect acc...

EUVD-2023-35802

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...

quick-cool.de Cross Site Scripting vulnerability OBB-3290873

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dyn-libs (>=0.2.1, <=0.2.2), quick-mock (>=0.0.2, <=0.0.3) +2 more potentially affected by CVE-2023-30861 via flask (1.0.0)

flask PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - dyn-libs =0.2.1, =0.0.2, =2.2.2.1, =2.3.1.0 - sevenpack 2.7.1 Source cves: CVE-2023-30861 Source advisory: OSV:PYSEC-2023-62...

CVE-2023-1554

The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-1554

The CVE concerns the Quick Paypal Payments WordPress plugin. Affected: Quick Paypal Payments plugin for WordPress (prior to version 5.7.26.4). Issue: insufficient sanitisation/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., administrators) even when unfiltered_htm...

CVE-2023-1554 Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS

The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress plugin Quick Paypal Payments has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...