12346 matches found
USN-6199-1 php7.4, php8.1 vulnerability
It was discovered that PHP incorrectly handled certain Digest authentication for SOAP. An attacker could possibly use this issue to expose sensitive information...
CVE-2020-36743
The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.13. This is due to missing or incorrect nonce validation on the implecodesaveproductsmeta function. This makes it possible for unauthenticated attackers to update...
CVE-2020-36743 Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass
The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.13. This is due to missing or incorrect nonce validation on the implecodesaveproductsmeta function. This makes it possible for unauthenticated attackers to update...
CVE-2020-36743
The CVE-2020-36743 entry concerns the WordPress Product Catalog Simple plugin (versions up to and including 1.5.13). The root cause is missing or incorrect nonce validation in the implecode_save_products_meta() function, allowing unauthenticated attackers to update product metadata by misleading ...
CVE-2020-36743 Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass
The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.13. This is due to missing or incorrect nonce validation on the implecodesaveproductsmeta function. This makes it possible for unauthenticated attackers to update...
PT-2023-11883 · WordPress · Product Catalog Simple
Name of the Vulnerable Software and Affected Versions: Product Catalog Simple plugin for WordPress versions up to, and including, 1.5.13 Description: The issue is due to missing or incorrect nonce validation on the implecode save products meta function, making it possible for unauthenticated...
CVE-2023-3474
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
Cross site scripting
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2023-3474 SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2023-3474
The CVE-2023-3474 entry affects SimplePHPscripts Simple Blog 3.2, where an issue in the URL Parameter Handler’s preview.php functionality enables cross-site scripting. The vulnerability arises from manipulating an input parameter, allowing remote exploitation (network vector) with no privileges a...
CVE-2023-3474 SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
PT-2023-24995 · Unknown · Simplephpscripts Event Script
Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Event Script version 2.1 Description: A vulnerability was found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack may be launched remotely. Recommendations: For...
PT-2023-24993 · Unknown · Simplephpscripts Simple Blog
Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Simple Blog version 3.2 Description: A vulnerability has been found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack can be launched remotely. Recommendations: Fo...
SimplePHPscripts Simple Blog 跨站脚本漏洞
SimplePHPscripts Simple Blog is a blogging system from the Bulgarian company SimplePHPscripts. A cross-site scripting vulnerability exists in SimplePHPscripts Simple Blog version 3.2, which stems from a problem with the file preview.php that can lead to cross-site scripting...
Simple Blog 3.2 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
CVE-2023-29434
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...
CVE-2023-29434 WordPress Optin Forms Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...
WordPress Simple Iframe Plugin < 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Simple Iframe Type Plugin Vulnerable versions 1.2.0 Fixed in 1.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2964 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 0a6a1d288d08 Credits Jihoon Lee Required...