CVE-2024-42626

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/add...

PT-2024-30076

Name of the Vulnerable Software and Affected Versions FrogCMS version 0.9.5 Description A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/snippet/add" API endpoint. Recommendations For FrogCMS version 0.9.5, consider disabling...

CVE-2024-42628

FrogCMS v0.9.5 has a CSRF vulnerability exploitable via the endpoint /admin/?/snippet/edit/3. Affected component: FrogCMS 0.9.5; vulnerability type: CSRF with high impact (C/H/I/A). Public exploitation details are not provided in the available documents. Remediation: no patch/version info is stat...

CVE-2024-42628: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/edit/3...

CVE-2024-42626

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/add...

FrogCms 安全漏洞

FrogCMS is a lightweight PHP content management system A cross-site request forgery vulnerability exists in FrogCms version v0.9.5, which stems from /admin/? /snippet/delete/3 does not adequately verify that the request is from a trusted user. The vulnerability can be exploited by an attacker to...

PT-2024-30077

Name of the Vulnerable Software and Affected Versions FrogCMS version 0.9.5 Description A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/snippet/delete/3" endpoint. Recommendations For FrogCMS version 0.9.5, as a temporary...

CVE-2024-42627: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/delete/3...

CVE-2024-42626: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/add...

CVE-2024-42628

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/edit/3...

Cross-site Scripting (XSS)

xapian-core is vulnerable to Cross-site Scripting XSS. The vulnerability is caused due to improper handling of HTML escaping by Xapian::MSet::snippet in queryparser/termgeneratorinternal.cc. This allows an attacker to potentially execute arbitrary scripts in the context of a user's web browser wh...

CVE-2024-4543

The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.1.4. This is due to missing or incorrect nonce validation when adding or editing shortcodes. This makes it possible for unauthenticated attackers to modify shortcodes vi...

CVE-2024-4543 Snippet Shortcodes <= 4.1.4 - Cross-Site Request Forgery

The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.1.4. This is due to missing or incorrect nonce validation when adding or editing shortcodes. This makes it possible for unauthenticated attackers to modify shortcodes vi...

CVE-2024-4543 Snippet Shortcodes <= 4.1.4 - Cross-Site Request Forgery

The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.1.4. This is due to missing or incorrect nonce validation when adding or editing shortcodes. This makes it possible for unauthenticated attackers to modify shortcodes vi...

WordPress Snippet Shortcodes plugin <= 4.1.4 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Snippet Shortcodes versions = 4.1.4...

CVE-2024-4543: Cross-Site Request Forgery (CSRF)

The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.1.4. This is due to missing or incorrect nonce validation when adding or editing shortcodes. This makes it possible for unauthenticated attackers to modify shortcodes vi...

PT-2024-31627

Name of the Vulnerable Software and Affected Versions: Snippet Shortcodes plugin for WordPress versions up to, and including, 4.1.4 Description: The issue is due to missing or incorrect nonce validation when adding or editing shortcodes, making it possible for unauthenticated attackers to modify...

WordPress Snippet Shortcodes Plugin <= 4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Snippet Shortcodes Type Plugin Vulnerable versions = 4.1.4 Fixed in 4.1.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4543 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4af570583b48 Credits Benedictus Jovan...

WordPress plugin Snippet Shortcodes Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress WPCode Lite 2.1.14 Cross Site Scripting Vulnerability

Exploit Title: Wordpress WPCode Lite Version 2.1.14 Stored XSS Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://wpcode.com/?utmsource=wprepo&utmmedium=link&utmcampaign=liteplugin Version 2.1.14 Steps to Execute the Payload: 1. Access the Admin Panel: - Navigate to the admin pan...