189 matches found
CVE-2024-25093 WordPress GD Rating System Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Milan Petrovic GD Rating System allows Stored XSS.This issue affects GD Rating System: from n/a through 3.5...
CVE-2024-25093
The CVE-2024-25093 is a stored XSS in the WordPress GD Rating System plugin
WordPress Plugin GD Rating System Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-20741 · Unknown · Gd Rating System
Name of the Vulnerable Software and Affected Versions: GD Rating System versions 3.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website...
WordPress GD Rating System Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)
Software GD Rating System Type Plugin Vulnerable versions = 3.5 Fixed in 3.5.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25093 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID effe5cde6539 Credits Joshua Chan Required privilege...
Exploit for CVE-2024-22890
CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...
WordPress GD Rating System Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)
Software GD Rating System Type Plugin Vulnerable versions = 3.5.0 Fixed in 3.5.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 343cc2dced19 Credits WordFence Required privileg...
WordPress Rate my Post – WP Rating System Plugin <= 3.4.2 is vulnerable to Broken Access Control
Software Rate my Post – WP Rating System Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.4.3 OWASP Top 10 A5: Security Misconfiguration Classification Broken Access Control CVE CVE-2023-51667 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 327f1bb4bf15 Credits Brandon...
CVE-2023-49765
Authorization Bypass Through User-Controlled Key vulnerability in Blaz K. Rate my Post – WP Rating System.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.1...
CVE-2023-49765
Authorization Bypass Through User-Controlled Key vulnerability in Blaz K. Rate my Post – WP Rating System.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.1...
CVE-2023-49765
CVE-2023-49765 affects the WordPress plugin Rate my Post – WP Rating System (versions
PT-2023-31335 · WordPress · Rate My Post – Wp Rating System
Name of the Vulnerable Software and Affected Versions: Rate my Post – WP Rating System versions 3.4.1 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects the Rate my Post – WP Rating System plugin...
Rate my Post – WP Rating System < 3.3.9 - Contributor+ Stored XSS via Shortcode
The plugin does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Exploit shortcode: ratemypost-result id='" onmouseover="alert1"'...
WordPress Rate my Post - WP Rating System Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery...
CVE-2022-40671
Cross-Site Request Forgery CSRF vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress...
CVE-2022-40671
Cross-Site Request Forgery CSRF vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress...
CVE-2022-40310
Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...
Race condition
Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...