CVE-2024-38689 WordPress Simple Popup plugin <= 4.4 - Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Popup allows Stored XSS.This issue affects Simple Popup: from n/a through 4.4...

CVE-2024-38689

CVE-2024-38689 is a stored XSS in the WordPress plugin Simple Popup by Garrett Grimm, affecting the plugin version range “from n/a through 4.4.” The root cause cited is improper neutralization of input during web page generation. The connected docs reiterate the vulnerability class and affected p...

PT-2024-27661 · Unknown · Simple Post Notes

Name of the Vulnerable Software and Affected Versions: Simple Post Notes versions n/a through 1.7.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-27859 · Unknown · Simple Responsive Slider

Name of the Vulnerable Software and Affected Versions: Simple Responsive Slider versions 0.2.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: Fo...

LG Simple Editor XML External Entity Handling Vulnerability (CNVD-2024-33683)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an XML External Entity Handling vulnerability due to an improper restriction on XML External Entity XXE references, where a...

LG Simple Editor Information Disclosure Vulnerability

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34036)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete a system by sending...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34037)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete arbitrary files...

LG Simple Editor Remote Code Execution Vulnerability (CNVD-2024-33680)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a remote code execution vulnerability that is caused by not properly validating a user-supplied string before executing a...

LG Simple Editor Information Disclosure Vulnerability (CNVD-2024-34039)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a directory traversal information disclosure vulnerability that can be exploited by attackers to disclose sensitive informati...

LG Simple Editor Remote Code Execution Vulnerability (CNVD-2024-33685)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A remote code execution vulnerability exists in LG Simple Editor due to an exposed and dangerous feature. An attacker could exploit the vulnerability to...

LG Simple Editor Information Disclosure Vulnerability (CNVD-2024-34033)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an information disclosure vulnerability that can be exploited by attackers to disclose sensitive information...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34038)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete arbitrary files...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34027)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a directory traversal arbitrary file deletion vulnerability that can be exploited by an attacker to send a crafted request to...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34035)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete a system by sending...

LG Simple Editor Information Disclosure Vulnerability (CNVD-2024-34029)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an information disclosure vulnerability that can be exploited by attackers to disclose sensitive information...

LG Simple Editor Remote Code Execution Vulnerability (CNVD-2024-33689)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a remote code execution vulnerability that is caused by failing to properly validate a user-supplied path before using it in ...

LG Simple Editor Remote Code Execution Vulnerability (CNVD-2024-33686)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a remote code execution vulnerability that is caused by failing to properly validate a user-supplied path before using it in ...

LG Simple Editor XML External Entity Handling Vulnerability (CNVD-2024-33682)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an XML External Entity Handling vulnerability due to an improper restriction on XML External Entity XXE references, where a...

LG Simple Editor Remote Code Execution Vulnerability (CNVD-2024-33681)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a remote code execution vulnerability that is caused by not properly validating a user-supplied string before executing a...