WordPress Random Image Selector plugin <= 1.5.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Abdi Pranata in WordPress Plugin Random Image Selector versions = 2.4...

Hot Random Image < 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Hot Random Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute in versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-leve...

CVE-2024-29796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hot Themes Hot Random Image allows Stored XSS.This issue affects Hot Random Image: from n/a through 1.8.1...

CVE-2024-29796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hot Themes Hot Random Image allows Stored XSS.This issue affects Hot Random Image: from n/a through 1.8.1...

CVE-2024-29796 WordPress Hot Random Image plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hot Themes Hot Random Image allows Stored XSS.This issue affects Hot Random Image: from n/a through 1.8.1...

CVE-2024-29796 WordPress Hot Random Image plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hot Themes Hot Random Image allows Stored XSS.This issue affects Hot Random Image: from n/a through 1.8.1...

WordPress Plugin Hot Random Image 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-23040

Name of the Vulnerable Software and Affected Versions Hot Random Image versions 1.8.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For Hot Random...

WordPress Hot Random Image Plugin <= 1.8.1 is vulnerable to Cross Site Scripting (XSS)

Software Hot Random Image Type Plugin Vulnerable versions = 1.8.1 Fixed in 1.8.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29796 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 63fa0707da67 Credits Ngô Thiên An ancorn from VNPT-VCI...

Joomla! 路径遍历漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A path traversal vulnerability exists in Joomla! 2.5.0 - 3.9.22. The vulnerabilit...

PT-2020-17364 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: An issue was discovered in the folder parameter of mod random image, which lacked input validation, leading to a path traversal vulnerability. Recommendations: For Joomla! versions 2.5.0...

PT-2020-14591 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: An issue was discovered in Joomla! where lack of input filtering and escaping allows XSS attacks in mod random image. Recommendations: For versions prior to 3.9.20, update to version 3.9.20 or lat...

WordPress Random Image Widget Plugin - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...

WordPress Random Image Widget Plugin - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...

WordPress Random image gallery with pretty photo zoom Plugin <= 7.4 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

grou-r&om-image-widget - Full Path Disclosure

The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...

Wordpress Themes grou-random-image-widget Full Path Disclosure

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Wordpress Themes- grou-random-image-widget Full Path Disclosure vulnerability ------------------------------------------------------------------------------- Autho...