4079 matches found
CVE-2023-36693 WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Alain Gonzalez WP RSS Images plugin = 1.1 versions...
CVE-2023-36693
CVE-2023-36693 describes a CSRF vulnerability in the WordPress plugin WP RSS Images, version <= 1.1. The root cause noted in Patchstack is insufficient nonce verification, enabling unauthenticated CSRF. Public references confirm the vulnerability affects unauthenticated users and can enable CS...
WordPress Plugin WP RSS Images 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2023-36693: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Alain Gonzalez WP RSS Images plugin = 1.1 versions...
PT-2023-25686
Name of the Vulnerable Software and Affected Versions Alain Gonzalez WP RSS Images plugin versions = 1.1 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
Server side request forgery (ssrf)
A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file codo.php. The manipulation of the argument rssurl leads to server-side request forgery. The exploit has been disclosed to the public and may be used. The...
PT-2023-25307 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.109 Description: A critical issue was found in DedeCMS, affecting an unknown functionality of the file co do.php. The manipulation of the rssurl argument leads to server-side request forgery. Recommendations: For DedeCMS...
WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP RSS Images Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-36693 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b8ffa72740fa Credits LEE SE HYOUNG...
The vulnerability of the GLPI system’s request and incident handling process, related to the possibility of forging requests on the server side, allows attackers to perform SSRF attacks.
The vulnerability of the GLPI system’s request and incident handling functionality lies in insufficient verification of data entered by users in the automatic RSS detection function. Users can send specially crafted HTTP requests to trick the application into initiating requests to arbitrary...
WS-2023-0203
A Cross-Site scripting XSS vulnerability was found in Brave Software on Brave Today through custom RSS feed. It allows an attacker to add any RSS feed to Brave Today, and the registered feed entries are shown in a tab with a hyperlink to the original article URL. Then, Brave iOS doesn't restrict...
DEBIAN-CVE-2023-34408
DokuWiki before 2023-04-04a allows XSS via RSS titles...
CVE-2023-34408
DokuWiki before 2023-04-04a allows XSS via RSS titles...
CVE-2023-34408
DokuWiki before 2023-04-04a allows XSS via RSS titles...
Cross site scripting
DokuWiki before 2023-04-04a allows XSS via RSS titles...
UBUNTU-CVE-2023-34408
DokuWiki before 2023-04-04a allows XSS via RSS titles...
CVE-2023-34408
DokuWiki before 2023-04-04a allows XSS via RSS titles...
CVE-2023-34408
DokuWiki before 2023-04-04a allows XSS via RSS titles...
CVE-2023-34408
DokuWiki before 2023-04-04a allows XSS via RSS titles...
PT-2023-24860 · Dokuwiki +1 · Dokuwiki +1
Name of the Vulnerable Software and Affected Versions: DokuWiki versions prior to 2023-04-04a Description: The issue allows for XSS via RSS titles. Recommendations: For versions prior to 2023-04-04a, update to a version released after 2023-04-04a to resolve the issue...