229 matches found
CVE-2024-51583 WordPress Kento Ads Rotator plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Kento Ads Rotator kento-ads-rotator allows Stored XSS.This issue affects Kento Ads Rotator: from n/a through = 1.3...
PT-2024-34726 · Unknown · Kento Ads Rotator
Name of the Vulnerable Software and Affected Versions: Kento Ads Rotator versions prior to 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This flaw allows Stored XSS, which can be used to inject malicio...
WordPress plugin Kento Ads Rotator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Faltu Testimonial Rotator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Faltu Testimonial Rotator versions = 1.0.0...
WordPress Faltu Testimonial Rotator Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software Faltu Testimonial Rotator Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51853 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d8876bdc616d Credits SOPROBRO Required privilege...
WordPress Kento Ads Rotator plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Kento Ads Rotator versions = 1.3...
WordPress Kento Ads Rotator Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)
Software Kento Ads Rotator Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51583 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0d17bd84097b Credits SOPROBRO Required privilege Contributor...
CVE-2024-7860
The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
CVE-2024-7860
The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
PT-2024-38637 · WordPress · Simple Headline Rotator
Name of the Vulnerable Software and Affected Versions: The Simple Headline Rotator WordPress plugin version 1.0 Description: The issue is related to the lack of CSRF checks in some places, as well as missing sanitization and escaping, which could allow attackers to make logged-in admins add Store...
WordPress Simple Headline Rotator plugin <= 1.0 - Stored XSS via CSRF vulnerability
Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Simple Headline Rotator versions = 1.0...
WordPress Simple Headline Rotator Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Simple Headline Rotator Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7860 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 30c399c6a90f Credits Daniel Ruf...
CVE-2024-28001
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Favicon Rotator allows Reflected XSS.This issue affects Favicon Rotator: from n/a through 1.2.10...
CVE-2024-28001 WordPress Favicon Rotator plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Favicon Rotator allows Reflected XSS.This issue affects Favicon Rotator: from n/a through 1.2.10...
CVE-2024-28001 WordPress Favicon Rotator plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Favicon Rotator allows Reflected XSS.This issue affects Favicon Rotator: from n/a through 1.2.10...
CVE-2024-28001
The CVE-2024-28001 entry concerns WordPress Favicon Rotator
WordPress Plugin Favicon Rotator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
WordPress Favicon Rotator Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)
Software Favicon Rotator Type Plugin Vulnerable versions = 1.2.10 Fixed in 1.2.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-28001 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e90080f8961c Credits Rafie Muhammad Patchstack...
