78 matches found
CVE-2024-4096 Responsive Tabs <= 4.0.8 - Contributor+ Stored XSS
The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-4096 Responsive Tabs <= 4.0.8 - Contributor+ Stored XSS
The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks...
WordPress plugin Responsive Tabs 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress Responsive Tabs Plugin <= 4.0.8 is vulnerable to Cross Site Scripting (XSS)
Software Responsive Tabs Type Plugin Vulnerable versions = 4.0.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4096 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d75c9df585a3 Credits Krugov Aryom Required...
PT-2024-29175 · WordPress · Responsive Tabs
Name of the Vulnerable Software and Affected Versions: Responsive Tabs WordPress plugin versions 4.0.8 and earlier Description: The issue allows high privilege users, such as Contributors and above, to perform Stored Cross-Site Scripting attacks due to the plugin not sanitizing and escaping some ...
CVE-2023-45635
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Darko Responsive Tabs allows Code Injection.This issue affects Responsive Tabs: from n/a before 4.0.6...
CVE-2023-45635 WordPress Responsive Tabs plugin < 4.0.6 - HTML Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Darko Responsive Tabs allows Code Injection.This issue affects Responsive Tabs: from n/a before 4.0.6...
CVE-2023-45635 WordPress Responsive Tabs plugin < 4.0.6 - HTML Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Darko Responsive Tabs allows Code Injection.This issue affects Responsive Tabs: from n/a before 4.0.6...
WordPress Responsive Tabs plugin < 4.0.7 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Responsive Tabs versions 4.0.7...
CVE-2024-1846
The Responsive Tabs WordPress plugin before 4.0.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-1846 Responsive Tabs < 4.0.7 - Contributor+ Stored XSS
The Responsive Tabs WordPress plugin before 4.0.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
WordPress Plugin Responsive Tabs 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress Responsive Tabs Plugin < 4.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Responsive Tabs Type Plugin Vulnerable versions 4.0.7 Fixed in 4.0.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1846 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d1565ae17f3e Credits Dmitrii Ignatyev Required...
WordPress Plugin WP Responsive Tabs horizontal vertical and accordion Tabs 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2024-3514
CVE-2024-3514 entry is rejected; duplicate; please use CVE-2024-1846 instead.
Responsive Tabs < 4.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Description The Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tabscolor value in all versions up to, and including, 4.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-30497
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17...
CVE-2024-30497
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17...
CVE-2024-30497
CVE-2024-30497 denotes an SQL injection vulnerability in the WP Responsive Tabs (horizontal, vertical, and accordion Tabs) WordPress plugin. Affected versions are
PT-2024-23423 · WordPress · Wp Responsive Tabs Horizontal Vertical/Accordion Tabs
Name of the Vulnerable Software and Affected Versions: WP Responsive Tabs horizontal vertical and accordion Tabs versions 1.1.17 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows f...