WordPress Plugin 5 star review funnel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2024-29089

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Menu allows Stored XSS.This issue affects Five Star Restaurant Menu: from n/a through 2.4.14...

CVE-2024-29089

CVE-2024-29089 is a Stored XSS vulnerability in Five Star Restaurant Menu (WordPress plugin) affecting versions up through 2.4.14. The issue stems from improper input neutralization during web page generation, enabling stored cross-site scripting. The linked Red Hat/Wordfence entries confirm the ...

PT-2024-22709 · Unknown · Five Star Restaurant Menu

Name of the Vulnerable Software and Affected Versions: Five Star Restaurant Menu versions through 2.4.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, which can be exploited by...

WordPress Five Star Restaurant Menu Plugin <= 2.4.14 is vulnerable to Cross Site Scripting (XSS)

Software Five Star Restaurant Menu Type Plugin Vulnerable versions = 2.4.14 Fixed in 2.4.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29089 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c610b96fa701 Credits Steven Julian Required...

Micro-Star International Afterburner Information Disclosure Vulnerability

Micro-Star International Afterburner is a graphics card overclocking utility program from Micro-Star International Taiwan, China. An information disclosure vulnerability exists in Micro-Star International Afterburner version v4.6.5.16370, which originates from a kernel memory leak by triggering t...

Micro-Star International Afterburner Code Issue Vulnerability

Micro-Star International Afterburner is a graphics card overclocking utility program from Micro-Star International Taiwan, China. A code issue vulnerability exists in Micro-Star International Afterburner version v4.6.5.16370, which originates from a denial of service vulnerability by triggering t...

risingstargame.com Cross Site Scripting vulnerability OBB-3865347

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-24838

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5...

CVE-2024-24838

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5...

CVE-2024-24838 WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5...

CVE-2024-24838

CVE-2024-24838 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Five Star Restaurant Reviews (Five Star Plugins) affecting versions up to 2.3.5. The root cause is improper neutralization of input during web page generation, enabling an attacker with Contributor+ privil...

WordPress plugin Five Star Restaurant Reviews Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-20605 · Unknown · Five Star Restaurant Reviews

Name of the Vulnerable Software and Affected Versions: Five Star Restaurant Reviews versions prior to 2.3.6 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject malicious...

WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)

Software Five Star Restaurant Reviews Type Plugin Vulnerable versions = 2.3.5 Fixed in 2.3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24838 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 99e84e82442f Credits Steven Julian Required...

COLDRIVER Expands Beyond Phishing, Incorporating Custom SPICA Backdoor

Summary: The threat actor associated with Russia, known as COLDRIVER or Star Blizard, has expanded its tactics from mere credential harvesting. The group has initiated campaigns where PDFs are employed as lure documents to distribute malware. Notably, COLDRIVER has introduced its first custom...

Rate Star Review < 1.5.2 - Reflected Cross-Site Scripting

Description The Rate Star Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

CVE-2023-52213

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VideoWhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings allows Reflected XSS.This issue affects Rate Star Review – AJAX Reviews for Content, with Star Ratings: from n/a through...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VideoWhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings allows Reflected XSS.This issue affects Rate Star Review – AJAX Reviews for Content, with Star Ratings: from n/a through...