7 matches found
EUVD-2023-29412
Malicious code in bioql PyPI...
CVE-2024-37215
CVE-2024-37215 is a Stored XSS in Transition Slider – Responsive Image Slider and Gallery (WordPress plugin) up to version 2.20.3. Root cause: improper neutralization of input during web page generation. Affected: Transition Slider – Responsive Image Slider and Gallery (versions n/a through 2.20....
WordPress Transition Slider – Responsive Image Slider and Gallery Plugin <= 2.20.3 is vulnerable to Cross Site Scripting (XSS)
Software Transition Slider – Responsive Image Slider and Gallery Type Plugin Vulnerable versions = 2.20.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37215 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 549d55c8caf1 Credits...
CVE-2023-25457 WordPress Slider Carousel – Responsive Image Slider plugin <=1.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Richteam Slider Carousel – Responsive Image Slider.This issue affects Slider Carousel – Responsive Image Slider: from n/a through 1.5.1...
CVE-2023-25457 WordPress Slider Carousel – Responsive Image Slider plugin <=1.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Richteam Slider Carousel – Responsive Image Slider.This issue affects Slider Carousel – Responsive Image Slider: from n/a through 1.5.1...
PT-2024-12060 · Unknown · Richteam Slider Carousel – Responsive Image Slider
Name of the Vulnerable Software and Affected Versions: Richteam Slider Carousel – Responsive Image Slider versions 1.5.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Richteam Slider Carousel – Responsive Image Slider. Recommendations: For versions...
CVE-2023-6493
The Depicter Slider WordPress plugin (Averta Depicter Slider) is vulnerable to Cross-Site Request Forgery in all versions up to 2.0.6 due to missing/incorrect nonce validation on the save function. Unauthenticated attackers can modify plugin settings by tricking an administrator into performing a...