PT-2023-28025 · WordPress · Beplus Sermon'E – Sermons Online

Name of the Vulnerable Software and Affected Versions: Beplus Sermon'e – Sermons Online plugin version 1.0.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-23616 · Fahad Mahmood · Fahad Mahmood Wp Docs

Name of the Vulnerable Software and Affected Versions: Fahad Mahmood WP Docs plugin versions prior to 1.9.9 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

PT-2023-21142 · WordPress · Maui Marketing Update Image Tag Alt Attribute

Name of the Vulnerable Software and Affected Versions: Maui Marketing Update Image Tag Alt Attribute plugin versions = 2.4.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2023-22538 · Total.Js · Total.Js

Name of the Vulnerable Software and Affected Versions: TotalJS messenger version b6cf1c9 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field. This enables attackers to...

PT-2023-15191 · Blockonomics · Blockonomics Wordpress Bitcoin Payments

Name of the Vulnerable Software and Affected Versions: Blockonomics WordPress Bitcoin Payments – Blockonomics plugin versions = 3.5.7 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website, potentially...

PT-2023-15415 · Unknown · Mickael Austoni Map Multi Marker

Name of the Vulnerable Software and Affected Versions: Mickael Austoni Map Multi Marker plugin versions = 3.2.1 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website, potentially allowing them to steal user...

PT-2022-25644 · WordPress · 2Kb Amazon Affiliates Store Plugin

Name of the Vulnerable Software and Affected Versions: 2kb Amazon Affiliates Store plugin versions =2.1.5 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website, potentially stealing user data or taking...

PT-2022-24253

Name of the Vulnerable Software and Affected Versions Nintex Workflow plugin version 5.2.2.30 for SharePoint Description The issue allows for Cross-Site Scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. This can lead to unauthorized access or...

Read the Docs vulnerable to Cross-Site Scripting (XSS)

Impact This vulnerability allowed a malicious user to serve arbitrary HTML files from the main application domain readthedocs.org/readthedocs.com by exploiting a vulnerability in the code that serves downloadable content from a project. Exploiting this would have required the attacker to get a...

CVE-2022-41542

devhub 0.102.0 was discovered to contain a broken session control...

Design/Logic Flaw

devhub 0.102.0 was discovered to contain a broken session control...

CVE-2022-41542

CVE-2022-41542 affects devhub, specifically version 0.102.0, due to a broken session control. The CVE entry lists a Network attack vector with low privileges required and no user interaction, and a base score of 5.4 (Medium). Public references confirm the issue is tied to devhub 0.102.0 and descr...

CVE-2022-41542

devhub 0.102.0 was discovered to contain a broken session control...

CVE-2022-41542: Insufficient Session Expiration

devhub 0.102.0 was discovered to contain a broken session control...

DevHub 代码问题漏洞

DevHub is a GitHub notification and activity on the desktop from DevHub, Inc. A security vulnerability exists in DevHub version 0.102.0 that stems from a corrupt session control...

CVE-2022-41542

devhub 0.102.0 was discovered to contain a broken session control...

CVE-2022-41542

devhub 0.102.0 was discovered to contain a broken session control...

PT-2022-25927 · Devhub · Devhub

Name of the Vulnerable Software and Affected Versions: devhub version 0.102.0 Description: The issue is related to broken session control in the software. Recommendations: For devhub version 0.102.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2022-16811

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.21 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take...

rainloop -- cross-site-scripting (XSS) vulnerability

Simon Scannell reports: The code vulnerability can be easily exploited by an attacker by sending a malicious email to a victim that uses RainLoop as a mail client. When the email is viewed by the victim, the attacker gains full control over the session of the victim and can steal any of their...