4689 matches found
CVE-2023-5334 WP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Responsive header image slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spresponsiveslider' shortcode in versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2023-5334
The CVE-2023-5334 in WP Responsive header image slider (WordPress) is a Stored XSS in the sp_responsiveslider shortcode affecting versions up to 3.2.1. Authenticated attackers with contributor+ can inject scripts that execute on page load. Multiple sources confirm the vulnerability; patch status ...
CVE-2023-5334 WP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Responsive header image slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spresponsiveslider' shortcode in versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2023-39649
Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop. In the module “Theme Volty CMS Category Slider” tvcmscategoryslider up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...
PrestaShop SQL Injection Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image scaling. PrestaShop suffers from an SQL injection vulnerability that originates from improper neutralization of SQL parameters...
CVE-2023-39646
Theme Volty CMS Category Chain Slider (PrestaShop) vulnerable in tvcmscategorychainslider up to version 4.0.1 due to improper neutralization of SQL parameters, enabling SQL injection by a guest. Affected component is the PrestaShop module from Theme Volty with the vulnerable code path in the Cate...
CVE-2023-39649
Summary : CVE-2023-39649 affects the Theme Volty CMS Category Slider module for PrestaShop, up to version 4.0.1. The root cause is improper neutralization of SQL parameters, allowing a guest to perform SQL injection in affected versions. Affected product/scope : Theme Volty CMS Category Slider (t...
PrestaShop SQL Injection Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. PrestaShop suffers from an SQL injection vulnerability that originates from improper neutralization of SQL parameters ...
WordPress Plugin Responsive header image slider cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-44242
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin = 1.3.54 versions...
CVE-2023-44242
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin = 1.3.54 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin = 1.3.54 versions...
CVE-2023-44242
CVE-2023-44242 affects 2J Slideshow Team Slideshow, Image Slider by 2J plugin (WordPress) version 1.3.54 to mitigate the vulnerability. No other products or exploitation details are provided in the documents.
WordPress Tiny Carousel Horizontal Slider Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)
Software Tiny Carousel Horizontal Slider Type Plugin Vulnerable versions = 8.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-44229 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cb53e45eb90e Credits yuyudhn...
Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...
WordPress Testimonial Slider Shortcode Plugin < 1.1.9 is vulnerable to Cross Site Scripting (XSS)
Software Testimonial Slider Shortcode Type Plugin Vulnerable versions 1.1.9 Fixed in 1.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0cd9339aa1a8 Credits Unknown Required...
WordPress Carousel Slider Plugin <= 2.2.2 is vulnerable to Broken Access Control
Software Carousel Slider Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.2.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41848 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ed609f73728e Credits Nguyen Anh Tien Required...
CVE-2023-3499
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.16 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for...