4697 matches found
CVE-2024-5729 Simple AL Slider <= 1.2.10 - Reflected XSS
The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-5729
CVE-2024-5729 affects WordPress Simple AL Slider plugin up to version 1.2.10. The issue is a reflected XSS caused by insufficient sanitisation/escaping of a parameter before echoing it on the page, which could be exploited against high-privilege users (e.g., admins). Red Hat confirms the same vul...
CVE-2024-5729 Simple AL Slider <= 1.2.10 - Reflected XSS
The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
WordPress Slider Revolution Plugin <= 6.7.13 is vulnerable to Cross Site Scripting (XSS)
Software Slider Revolution Type Plugin Vulnerable versions = 6.7.13 Fixed in 6.7.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37449 Patch priority Low CVSS severity Low 5.9 Developer ThemePunch PSID 0c45389d2eaa Credits wcraft Required privilege Administrator...
PT-2024-37105 · WordPress · Simple Al Slider
Name of the Vulnerable Software and Affected Versions: Simple AL Slider WordPress plugin versions prior to 1.2.11 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the...
WordPress Depicter Slider Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Depicter Slider Type Plugin Vulnerable versions = 3.0.2 Fixed in 3.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37414 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a3581769d268 Credits Steven Julian Required privilege Edito...
WordPress plugin Simple AL Slider security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Malicious code in anything_slider (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in anything-slider_rails (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3838 Malicious code in vue-netflix-slider (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in vue-netflix-slider (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-35762
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4...
CVE-2024-35762
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4...
CVE-2024-35762
CVE-2024-35762 is a Stored Cross-Site Scripting issue in Cryout Creations Serious Slider for WordPress, affecting Serious Slider 1.2.4 and earlier. Root cause: improper neutralization of input during web page generation. Impact: stored XSS could enable an attacker with Editor access to inject scr...
CVE-2024-35762 WordPress Serious Slider plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4...
WordPress plugin Serious Slider cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-37222
Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...
CVE-2024-37222
Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...
WordPress Transition Slider – Responsive Image Slider and Gallery plugin <= 2.20.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Transition Slider – Responsive Image Slider and Gallery versions = 2.20.3...
CVE-2024-37222 WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...