CVE-2024-43935 WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7...

CVE-2024-43935 WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7...

CVE-2024-38688

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-38688

...

CVE-2024-38688

...

CVE-2024-38688

CVE-2024-38688 is rejected/withdrawn; this CVE ID does not represent an active vulnerability.

MAL-2024-5027 Malicious code in data-platform-airflow-recipes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in data-platform-airflow-recipes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-0403

Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF...

CVE-2024-0403 Recipes 1.5.10 - Blind SSRF

Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF...

CVE-2024-0403 Recipes 1.5.10 - Blind SSRF

Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF...

CVE-2024-0403

CVE-2024-0403 affects Recipes version 1.5.10, where the server allows arbitrary HTTP requests due to a Server-Side Request Forgery (SSRF) vulnerability. The issue enables the server to be used to contact external resources (e.g., “arbitrary HTTP requests”) and is cataloged with a CVSSv3.1 base sc...

Recipes Code Issue Vulnerability

Recipes is an application for managing recipes, planning meals, creating shopping lists, and more! A code issue vulnerability exists in Recipes version 1.5.10 that stems from allowing arbitrary HTTP requests to be made through the server and is vulnerable to server-side request forgery SSRF attac...

WordPress Plugin WP Recipe Maker Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-15529 · Recipes · Recipes

Name of the Vulnerable Software and Affected Versions: Recipes version 1.5.10 Description: The application is vulnerable to Server-Side Request Forgery SSRF, allowing arbitrary HTTP requests to be made through the server. Recommendations: For Recipes version 1.5.10, as a temporary workaround,...

PYSEC-2024-240

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.This issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook.The vulnerability stems from lack of sanitization over template variables...

PT-2024-4085

Name of the Vulnerable Software and Affected Versions MLflow versions prior to 2.4.1 Description The issue stems from insufficient sanitization in MLflow, leading to cross-site scripting XSS when running an untrusted recipe. This can be escalated to a client-side remote code execution RCE when...

PT-2024-17421 · WordPress · Wp Recipe Maker

Name of the Vulnerable Software and Affected Versions: WP Recipe Maker plugin for WordPress versions up to, and including, 9.1.2 Description: The issue allows authenticated attackers with subscriber-level access and above to perform SQL Injection via the recipes parameter due to insufficient...

[SECURITY] Fedora 39 Update: python-cryptography-41.0.7-1.fc39

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

Recipe Maker For Your Food Blog from Zip Recipes < 8.1.1 - Authenticated(Contributor+) SQL Injection

Description The Recipe Maker For Your Food Blog from Zip Recipes plugin for WordPress is vulnerable to SQL Injection via the ‘order’ and 'orderby' parameters in all versions up to 8.1.1 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...