PT-2024-39007 · WordPress · Spice Starter Sites

Name of the Vulnerable Software and Affected Versions: Spice Starter Sites plugin for WordPress versions 1.2.5 and earlier Description: The issue allows unauthorized modification of data due to a missing capability check on the spice starter sites importer creater function. This makes it possible...

CVE-2024-8430: Missing Authorization

The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spicestartersitesimportercreater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo conte...

WordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by wcraft Patchstack Alliance in WordPress Plugin Starter Templates versions = 4.4.0...

WordPress Starter Templates Plugin <= 4.4.0 is vulnerable to Cross Site Scripting (XSS)

Software Starter Templates Type Plugin Vulnerable versions = 4.4.0 Fixed in 4.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47345 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID faea2a68ca24 Credits wcraft Required privilege Author...

CVE-2024-43990

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...

CVE-2024-43990 WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...

CVE-2024-43990

CVE-2024-43990 (Masterstudy LMS Starter) describes an unauthenticated sensitive information exposure caused by insertion of data into log files. The vulnerability affects Masterstudy LMS Starter versions up to and including 1.1.8. Public sources in the Connected documents indicate this is a WordP...

CVE-2024-43990 WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...

WordPress plugin Masterstudy LMS Starter 日志信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A log information disclosure vulnerability...

PT-2024-30855 · Unknown · Masterstudy Lms Starter

Name of the Vulnerable Software and Affected Versions: Masterstudy LMS Starter versions 1.1.8 and below Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For Masterstudy LMS Starter versions...

CVE-2024-43990: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...

CVE-2024-44003

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through = 1.2.5...

CVE-2024-44003

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through 1.2.5...

CVE-2024-44003: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through = 1.2.5...

CVE-2024-44003 WordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through = 1.2.5...

CVE-2024-44003

CVE-2024-44003 describes a Reflected Cross‑Site Scripting vulnerability in the WordPress plugin Spice Starter Sites . Affected versions are

CVE-2024-44003 WordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through 1.2.5...

WordPress plugin Spice Starter Sites 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

PT-2024-30868 · Unknown · Spice Starter Sites

Name of the Vulnerable Software and Affected Versions: Spice Starter Sites versions 1.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: F...

WordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Spice Starter Sites versions = 1.2.5...