19 matches found
EUVD-2023-50356
Malicious code in bioql PyPI...
CVE-2023-46095
Cross-Site Request Forgery CSRF vulnerability in Chetan Gole Smooth Scroll Links SSL plugin = 1.1.0 versions...
CVE-2023-46095
Cross-Site Request Forgery CSRF vulnerability in Chetan Gole Smooth Scroll Links SSL plugin = 1.1.0 versions...
CVE-2023-46095
Cross-Site Request Forgery CSRF vulnerability in Chetan Gole Smooth Scroll Links SSL plugin = 1.1.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Chetan Gole Smooth Scroll Links SSL plugin = 1.1.0 versions...
CVE-2023-46095 WordPress Smooth Scroll Links Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Chetan Gole Smooth Scroll Links SSL plugin = 1.1.0 versions...
CVE-2023-46095
The CVE-2023-46095 entry refers to a CSRF vulnerability in the WordPress plugin Smooth Scroll Links [SSL], affecting versions 1.1.0 (or remove/rethink the plugin) to resolve the vulnerability; monitor for official patch availability or vendor advisories.
WordPress Plugin Smooth Scroll Links [SSL] Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...
PT-2023-29845 · WordPress · Chetan Gole Smooth Scroll Links
Name of the Vulnerable Software and Affected Versions: Chetan Gole Smooth Scroll Links SSL plugin versions = 1.1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the us...
CVE-2023-46095: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Chetan Gole Smooth Scroll Links SSL plugin = 1.1.0 versions...
WordPress Smooth Scroll Links Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Smooth Scroll Links Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46095 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1e27113556ed Credits Skalucy Required...
WordPress Easy Smooth Scroll Links Plugin <= 2.23.1 is vulnerable to Cross Site Scripting (XSS)
Software Easy Smooth Scroll Links Type Plugin Vulnerable versions = 2.23.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 09f432ff9f4d Credits Rafie Muhammad Patchstac...
CVE-2022-0728
The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-0728
The CVE-2022-0728 entry concerns the WordPress plugin Easy Smooth Scroll Links (prior to version 2.23.1). Affected component: plugin settings handling, which are not properly sanitized/escaped. Root cause: unfiltered input in plugin settings enables stored Cross-Site Scripting. Impact: could allo...
CVE-2022-0728 Easy Smooth Scroll Links < 2.23.1 - Admin+ Stored Cross-Site Scripting
The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
PT-2022-13394
Name of the Vulnerable Software and Affected Versions Easy Smooth Scroll Links WordPress plugin versions prior to 2.23.1 Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and...
CVE-2022-0728: Improper Neutralization of Input During Web Page Generation
The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
WordPress Easy Smooth Scroll Links plugin cross-site scripting vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Easy Smooth Scroll Links plugin version prior to 2.23.1 has a cross-site scripting vulnerability that stems from the plugin'...
WordPress Easy Smooth Scroll Links – Smooth Scrolling Anchor plugin <= 2.23.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Easy Smooth Scroll Links – Smooth Scrolling Anchor plugin versions = 2.23.0. Solution Update the WordPress Easy Smooth Scroll Links – Smooth Scrolling Anchor plugin to the latest available version at...