12179 matches found
PT-2024-36578 · WordPress · Simple Photoswipe
Name of the Vulnerable Software and Affected Versions: Simple Photoswipe WordPress plugin version 0.1 Description: The issue concerns a lack of authorization checks when updating settings, potentially allowing any authenticated user to modify them. Recommendations: For Simple Photoswipe WordPress...
WordPress plugin Simple AL Slider security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress plugin Simple Photoswipe security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-5473
The Simple Photoswipe WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-5473 Simple Photoswipe <= 0.1 - Admin+ Stored XSS
The Simple Photoswipe WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-5473 Simple Photoswipe <= 0.1 - Admin+ Stored XSS
The Simple Photoswipe WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress plugin Simple Photoswipe security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-36408 · WordPress · Simple Photoswipe
Name of the Vulnerable Software and Affected Versions: Simple Photoswipe WordPress plugin version 0.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and escape some ...
WordPress Simple Photoswipe Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)
Software Simple Photoswipe Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5473 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 09269b6846fc Credits Felipe Caon Required...
Malicious code in simple-discord-https (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6012 Malicious code in simple-discord-https (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6011 Malicious code in simple-api-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in simple-api-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in discord-simple-http (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5069 Malicious code in discord-simple-api-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4304 Malicious code in Be.Vlааndereո.Basisregіsters.MessageHandling.Kafka.Simple (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3003 Malicious code in seriously-simple-podcasting (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in seriously-simple-podcasting (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-6280
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/ajax.php?action=savesettings. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack...
CVE-2024-6280 SourceCodester Simple Online Bidding System unrestricted upload
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/ajax.php?action=savesettings. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack...