Lucene search
+L

31 matches found

CNNVD
CNNVD
added 2024/05/08 12:00 a.m.10 views

WordPress plugin Multi-column Tag Map 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS8.3AI score0.00412EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/08 12:00 a.m.11 views

PT-2024-12950 · Unknown · Multi-Column Tag Map

Name of the Vulnerable Software and Affected Versions: Multi-column Tag Map versions n/a through 17.0.26 Description: The issue is related to a Missing Authorization vulnerability in the Multi-column Tag Map. Recommendations: For versions n/a through 17.0.26, update to a version later than 17.0.2...

6.5CVSS9.3AI score0.00412EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
added 2023/11/23 12:00 a.m.27 views

Multi-column Tag Map < 17.0.27 - Cross-Site Request Forgery

Description The Multi-column Tag Map plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the scmcTagMappluginoptions function in versions up to, and including, 17.0.26. This makes it possible for unauthenticated attackers to update the plugin's setting...

6.8AI score0.00412EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/09/01 12:00 a.m.25 views

WordPress Multi-column Tag Map Plugin <= 17.0.26 is vulnerable to Broken Access Control

Software Multi-column Tag Map Type Plugin Vulnerable versions = 17.0.26 Fixed in 17.0.27 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41651 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 543c5fba661a Credits Rio Darmawan Require...

6.5CVSS6.6AI score0.00412EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/04/06 5:15 a.m.10 views

CVE-2023-23815

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Alan Jackson Multi-column Tag Map plugin = 17.0.24 versions...

5.4CVSS5.8AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/06 5:15 a.m.22 views

CVE-2023-23815

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Alan Jackson Multi-column Tag Map plugin = 17.0.24 versions...

6.5CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/06 4:58 a.m.10 views

CVE-2023-23815 WordPress Multi-column Tag Map Plugin <= 17.0.24 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Alan Jackson Multi-column Tag Map plugin = 17.0.24 versions...

6.5CVSS5.5AI score0.00386EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/06 4:58 a.m.54 views

CVE-2023-23815

CVE-2023-23815 affects the WordPress plugin WordPress Multi-column Tag Map (Alan Jackson) versions

6.5CVSS5.3AI score0.00386EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/06 12:00 a.m.9 views

WordPress plugin Multi-column Tag Map 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.5AI score0.00386EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/02/02 12:00 a.m.20 views

Multi-column Tag Map < 17.0.25 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.1AI score0.00386EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2023/02/02 12:00 a.m.13 views

WordPress Multi-column Tag Map Plugin <= 17.0.24 is vulnerable to Cross Site Scripting (XSS)

Software Multi-column Tag Map Type Plugin Vulnerable versions = 17.0.24 Fixed in 17.0.25 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23815 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c91cbb10a1f3 Credits István Márton...

6.5CVSS6AI score0.00386EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder