4689 matches found
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Tiny carousel horizontal slider plus plugin = 3.2 versions...
CVE-2023-24418
CVE-2023-24418 affects the WordPress plugin Tiny carousel horizontal slider plus (admin+). The vulnerability is a Stored Cross-Site Scripting (XSS) in versions
CVE-2023-24392
CVE-2023-24392 affects the WordPress plugin I Thirteen Web Solution Full Width Banner Slider WP (versions ≤ 1.1.7). It is a unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability exposed via parameters like search_term and setacrionpage. Patch information in Patchstack indicates the ...
CVE-2023-24392 WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin = 1.1.7 versions...
PT-2023-19553 · WordPress · I Thirteen Web Solution Full Width Banner Slider Wp
Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution Full Width Banner Slider Wp plugin versions 1.1.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for reflected cross-site scripti...
WordPress plugin Full Width Banner Slider Wp 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
Tiny carousel horizontal slider plus <= 3.2 - Admin+ Stored XSS
The plugin does not escape several fields in the edit gallery and edit image forms, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress Team Circle Image Slider With Lightbox Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)
Software Team Circle Image Slider With Lightbox Type Plugin Vulnerable versions = 1.0.17 Fixed in 1.0.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2604 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 4f6a23b77029 Credi...
WordPress plugin Tiny carousel horizontal slider plus 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2023-23647
Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Sk. Abul Hasan Team Member – Team with Slider plugin = 4.4 versions...
CVE-2023-23647
Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Sk. Abul Hasan Team Member – Team with Slider plugin = 4.4 versions...
Cross site scripting
Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Sk. Abul Hasan Team Member – Team with Slider plugin = 4.4 versions...
CVE-2023-23647
CVE-2023-23647 is a stored-XSS vulnerability in the WordPress plugin Team Member – Team with Slider (also listed as Team Showcase Supreme) for versions
WordPress plugin Team Member – Team with Slider 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...
WordPress wordpress vertical image slider plugin Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)
Software wordpress vertical image slider plugin Type Plugin Vulnerable versions = 1.2.16 Fixed in 1.2.17 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24413 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID da3e59a78609...
PT-2023-19101 · WordPress · Team With Slider
Name of the Vulnerable Software and Affected Versions: Sk. Abul Hasan Team Member – Team with Slider plugin versions = 4.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website...
CVE-2023-0537
The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...
CVE-2023-0537
CVE-2023-0537 affects the WordPress plugin Product Slider For WooCommerce Lite (versions ≤ 1.1.7). The issue is stored cross-site scripting due to inadequate validation/escaping of shortcode attributes prior to output when the shortcode is embedded on a page, enabling attackers with contributor+ ...