EUVD-2024-49944

Malicious code in bioql PyPI...

CVE-2024-9446: Improper Neutralization of Input During Web Page Generation

The WP Simple Anchors Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpanchor shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress WP Simple Anchors Links plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpanchor Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via wpanchor Shortcode vulnerability discovered by theviper17y in WordPress Plugin WP Simple Anchors Links versions = 1.0.0...

WordPress WP Simple Anchors Links Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple Anchors Links Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9446 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5caa7b0b2512 Credits theviper17y Requir...