119 matches found
CVE-2024-51696
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ben.moody Content Syndication Toolkit Reader content-syndication-toolkit-reader allows Reflected XSS.This issue affects Content Syndication Toolkit Reader: from n/a through = 1.5...
CVE-2024-51696 WordPress Content Syndication Toolkit Reader plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ben.moody Content Syndication Toolkit Reader content-syndication-toolkit-reader allows Reflected XSS.This issue affects Content Syndication Toolkit Reader: from n/a through = 1.5...
CVE-2024-51696 WordPress Content Syndication Toolkit Reader plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ben.moody Content Syndication Toolkit Reader content-syndication-toolkit-reader allows Reflected XSS.This issue affects Content Syndication Toolkit Reader: from n/a through = 1.5...
CVE-2024-51696
CVE-2024-51696 is a reflected XSS in Content Syndication Toolkit Reader for WordPress, affecting versions up to 1.5. Root cause: improper input neutralization during web page generation. This entry notes Reflected XSS, but the connected documents do not provide an official patch/version that fixe...
WordPress plugin Content Syndication Toolkit Reader 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
PT-2024-34843 · Unknown · Content Syndication Toolkit Reader
Name of the Vulnerable Software and Affected Versions: Content Syndication Toolkit Reader versions 1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS, where an...
WordPress Content Syndication Toolkit Reader plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Content Syndication Toolkit Reader versions = 1.5...
WordPress Content Syndication Toolkit Reader Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)
Software Content Syndication Toolkit Reader Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51696 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4c15b730abc5 Credits João Pedro S...
Malicious code in Be.Vlaanderen.Basisregisters.ProjectionHаndling.Syndicаtion.Microsoft (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basіsregisters.ProjectionHanԁling.Syndication.Testing (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4092 Malicious code in Be.Vlaanderen.Basіsregisters.ProjectionHanԁling.Syndication.Testing (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basіsregisters.ProjectioոHanԁling.Syndicatioո.Testing (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4094 Malicious code in Be.Vlaanderen.Basіsregisters.ProјectionHandling.Syndication (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basіsregisters.ProјectionHandling.Syndication (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4149 Malicious code in Be.Vlaanderеn.Basіsregisters.ProјectionHandling.Syոdication (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderеn.Basіsregisters.ProјectionHandling.Syոdication (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlаanderen.Basisregisters.ProjectionHаndling.Syndicаtion.Miсrosoft (NuGet)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-34408
DokuWiki before 2023-04-04a allows XSS via RSS titles...
SUSE CVE-2012-0479
Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid 1 RSS or 2 Atom XML content...
GLPI 跨站脚本漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...