657 matches found
CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...
PT-2024-36653 · Unknown · Marco Giannini Xml Multilanguage Sitemap Generator
Name of the Vulnerable Software and Affected Versions: Marco Giannini XML Multilanguage Sitemap Generator versions 2.0.6 and earlier Description: The issue is related to a missing authorization vulnerability in the Marco Giannini XML Multilanguage Sitemap Generator. This vulnerability affects the...
WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin XML Multilanguage Sitemap Generator versions = 2.0.6...
PT-2024-17212 · WordPress · Kvcore Idx Plugin
Name of the Vulnerable Software and Affected Versions: kvCORE IDX plugin for WordPress versions up to, and including, 2.3.35 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping. This allows unauthenticated...
PT-2024-13819 · Ashish Ajani · Wp Simple Html Sitemap
Name of the Vulnerable Software and Affected Versions: Ashish Ajani WP Simple HTML Sitemap versions 2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For...
Malicious code in bitdefender-sitemap-creator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295547491c683880b2a5219679629caebf543d6787c220aa1abcca681af64f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11314 Malicious code in bitdefender-sitemap-creator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295547491c683880b2a5219679629caebf543d6787c220aa1abcca681af64f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Slick Sitemap plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Slick Sitemap versions = 2.0.0...
CVE-2024-11424
The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2024-11424 Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2024-11424 Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
WordPress Slick Sitemap Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)
Software Slick Sitemap Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11424 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 87cc32c756e9 Credits zakaria Required privilege...
CVE-2024-51922
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maruf Arafat VP Sitemap vp-sitemap allows Stored XSS.This issue affects VP Sitemap: from n/a through = 1.0...
CVE-2024-51922
CVE-2024-51922 — Stored XSS in VP Sitemap (Maruf Arafat) plugin for WordPress. Description: Improper neutralization of input during web page generation enables Stored XSS in VP Sitemap versions up to 1.0. CVSS v3.1 base score 6.5 (Medium) with Network attack vector, Low to Moderate impact on conf...
CVE-2024-51922 WordPress VP Sitemap plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maruf Arafat VP Sitemap vp-sitemap allows Stored XSS.This issue affects VP Sitemap: from n/a through = 1.0...
CVE-2024-51922 WordPress VP Sitemap plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maruf Arafat VP Sitemap vp-sitemap allows Stored XSS.This issue affects VP Sitemap: from n/a through = 1.0...
WordPress VP Sitemap plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin VP Sitemap versions = 1.0...
WordPress VP Sitemap Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software VP Sitemap Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51922 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b0df95bf7481 Credits SOPROBRO Required privilege Contributor Publish...
CVE-2024-7385
The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...