Malicious code in mkh-responsive (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11389 Malicious code in mkh-responsive (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-11747

The Responsive Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'somryv' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-11747 Responsive Videos <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Responsive Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'somryv' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress plugin Responsive Videos 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Responsive Lightbox plugin <= 2.4.8 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Responsive Lightbox versions = 2.4.8...

WordPress Responsive Videos plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Responsive Videos versions = 2.1...

CVE-2024-53762

Cross-Site Request Forgery CSRF vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Stored XSS.This issue affects FastBook: from n/a through = 1.1...

CVE-2024-52467 WordPress AI Responsive Gallery Album plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Responsive Gallery Album ai-responsive-gallery-album allows Reflected XSS.This issue affects AI Responsive Gallery Album: from n/a through = 1.4...

CVE-2024-53762

CVE-2024-53762 is a CSRF to Stored XSS vulnerability affecting the WordPress plugin FastBook – Responsive Appointment Booking and Scheduling System (FastBook) versions up to 1.1. The CVSS 3.1 base score is 7.1 (HIGH) with network attack vector, low attack complexity, no privileges required, but u...

WordPress plugin AI Responsive Gallery Album 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-11963

A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected by this issue is some unknown functionality of the file /admin/room.php. The manipulation of the argument troom leads to sql injection. The attack may be launched remotely. The...

CVE-2024-11963

A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected by this issue is some unknown functionality of the file /admin/room.php. The manipulation of the argument troom leads to sql injection. The attack may be launched remotely. The...

CVE-2024-11963 code-projects Responsive Hotel Site room.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected by this issue is some unknown functionality of the file /admin/room.php. The manipulation of the argument troom leads to sql injection. The attack may be launched remotely. The...

CVE-2024-11963

CVE-2024-11963 affects code-projects Responsive Hotel Site 1.0. The vulnerability is a SQL injection in the /admin/room.php file caused by improper handling of the troom parameter, which can be exploited remotely. Multiple sources describe an attacker manipulating troom to execute SQL commands an...

CVE-2024-11961

CVE-2024-11961 affects Guangzhou Huayi Intelligent Technology Jeewms 3.7, specifically the preHandle function in src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. The issue is argument manipulation leading to information disclosure, with remote exploit potential and public disclos...

CVE-2024-11659 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diagiperf. The manipulation of the argument iperf leads to command injection. The attack may be...

CVE-2024-11658

A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/network/ajaxgetChannelList. The manipulation of the argument countryCode leads to command...

CVE-2024-11658

CVE-2024-11658 affects EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT (up to 20241118). The vulnerability stems from an injection in the file /admin/network/ajax_getChannelList where manipulating the countryCode parameter leads to command injection, exploitable remotely. Public exploit appears to ...

CVE-2024-11656

CVE-2024-11656 affects EnGenius ENH1350EXT, ENS500-AC and ENS620EXT (up to 20241118). The issue is a command-injection in the /admin/network/diag_ping6 handling, triggered by manipulation of the diag_ping6 argument, potentially exploitable remotely. Public exploit appears to have been disclosed. ...