5466 matches found
WordPress Schema Lite Theme <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Schema Lite Type Theme Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37452 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eb6f533c9390 Credits Dhabaleshwar Das Required...
CVE-2024-5601
The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-5601
The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-5601 Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode
The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-5601
CVE-2024-5601 affects the Create by Mediavine plugin for WordPress (up to v1.9.7) and enables Stored Cross‑Site Scripting via the Schema Meta shortcode due to insufficient input sanitization and output escaping. Attack requires authenticated access at contributor level or higher, and can inject s...
CVE-2024-5601 Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode
The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress Create by Mediavine plugin <= 1.9.7 - Contributor+ Stored Cross-Site Scripting via Schema Meta Shortcode vulnerability
Contributor+ Stored Cross-Site Scripting via Schema Meta Shortcode vulnerability discovered by Krzysztof Zając in WordPress Plugin Create by Mediavine versions = 1.9.7...
PT-2024-36663
Name of the Vulnerable Software and Affected Versions Create by Mediavine plugin for WordPress versions up to, and including, 1.9.7 Description The issue is related to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode due to insufficient input sanitization and output escaping on...
CVE-2024-5601: Improper Neutralization of Input During Web Page Generation
The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta shortcode in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress Plugin Create by Mediavine Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
October System module has an Open Redirect for Administrator Accounts
Impact This advisory affects authenticated administrators who may be redirected to an untrusted URL using the PageFinder schema. The resolver for the page finder link schema october:// allowed external links, therefore allowing an open redirect outside the scope of the active host. This...
GHSA-V2VF-JV88-3FP5 October System module has an Open Redirect for Administrator Accounts
Impact This advisory affects authenticated administrators who may be redirected to an untrusted URL using the PageFinder schema. The resolver for the page finder link schema october:// allowed external links, therefore allowing an open redirect outside the scope of the active host. This...
PT-2024-20542 · October · October
Name of the Vulnerable Software and Affected Versions: October versions prior to 3.5.15 Description: This issue affects authenticated administrators who may be redirected to an untrusted URL using the PageFinder schema. The resolver for the page finder link schema october:// allowed external link...
Malicious code in logstash-codec-avro-schema_registry (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-record_inline_schema (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ITLеc.Xrm.SchemaValidatіon (NuGet)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-36683
Missing Authorization vulnerability in WP SCHEMA PRO Schema Pro.This issue affects Schema Pro: from n/a through 2.7.8...
CVE-2023-36683 WordPress Schema Pro plugin <= 2.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP SCHEMA PRO Schema Pro.This issue affects Schema Pro: from n/a through 2.7.8...
CVE-2023-36683 WordPress Schema Pro plugin <= 2.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP SCHEMA PRO Schema Pro.This issue affects Schema Pro: from n/a through 2.7.8...