Lucene search
+L

1030 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/21 12:00 a.m.•3 views

CVE-2024-35769: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in John West Slideshow SE allows Stored XSS.This issue affects Slideshow SE: from n/a through 2.5.17...

5.9CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/21 12:00 a.m.•12 views

PT-2024-26733 · Unknown · Sh Slideshow

Name of the Vulnerable Software and Affected Versions: Slideshow SE versions 2.5.17 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability, in the PHP Local File Inclusion of Slideshow SE. This...

8.8CVSS6.9AI score0.00567EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2024/06/19 9:11 a.m.•14 views

WordPress Slideshow SE plugin <= 2.5.17 - Author+ Limited Local File Inclusion vulnerability

Author+ Limited Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Slideshow SE versions = 2.5.17...

8.8CVSS7AI score0.00567EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/06/19 12:00 a.m.•24 views

WordPress Slideshow SE Plugin <= 2.5.17 is vulnerable to Local File Inclusion

Software Slideshow SE Type Plugin Vulnerable versions = 2.5.17 Fixed in 2.5.18 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-35778 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7958c856162d Credits João Pedro S Alcântara Kinorth...

8.8CVSS6.5AI score0.00567EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/06/18 10:31 a.m.•12 views

WordPress Slideshow SE plugin <= 2.5.20 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Slideshow SE versions = 2.5.20...

5.9CVSS6AI score0.00294EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/06/18 12:00 a.m.•13 views

WordPress Slideshow SE Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)

Software Slideshow SE Type Plugin Vulnerable versions = 2.5.20 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35769 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5064bdc28526 Credits Steven Julian Required privilege Author...

5.9CVSS6.6AI score0.00294EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/06/12 1:55 a.m.•40 views

CVE-2024-5543 Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection

The Slideshow Gallery LITE plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

8.1CVSS0.00486EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•4 views

CVE-2024-5543: Improper Neutralization of Special Elements used in an SQL Command

The Slideshow Gallery LITE plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

8.1CVSS5.7AI score0.00486EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/06/11 1:43 p.m.•14 views

Wordpress Slideshow Gallery LITE plugin <= 1.8.1 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Krzysztof Zając in WordPress Plugin Left right image slideshow gallery versions = 1.8.1...

8.1CVSS8.1AI score0.00486EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/06/11 12:00 a.m.•17 views

WordPress Left right image slideshow gallery Plugin <= 1.8.1 is vulnerable to SQL Injection

Software Left right image slideshow gallery Type Plugin Vulnerable versions = 1.8.1 Fixed in 1.8.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-5543 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 26f19037ceb8 Credits Krzysztof Zając Required...

8.1CVSS6.8AI score0.00486EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/06/10 8:15 a.m.•18 views

CVE-2024-35722

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/10 8:15 a.m.•42 views

CVE-2024-35722

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

8.8CVSS0.00356EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/10 8:15 a.m.•16 views

CVE-2024-35717

Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/10 8:00 a.m.•72 views

CVE-2024-35717

No technical details about CVE-2024-35717 are present in the provided Connected documents. Public specifics (affected version range, impact, and mitigation) are not disclosed here. Monitor official advisories for precise exploitation vectors and fixes.

8.8CVSS5.6AI score0.00356EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/10 7:56 a.m.•32 views

CVE-2024-35722 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

4.3CVSS6.9AI score0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/10 7:56 a.m.•42 views

CVE-2024-35722 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

4.3CVSS0.00356EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•4 views

CVE-2024-35722: Missing Authorization

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•2 views

CVE-2024-35717: Missing Authorization

Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/10 12:00 a.m.•15 views

WordPress plugin Slider Responsive Slideshow Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

8.8CVSS6.7AI score0.00356EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/06/06 11:50 a.m.•35 views

WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Slider Responsive Slideshow – Image slider, Gallery slideshow versions = 1.4.0...

8.8CVSS7AI score0.00356EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder