Bazaar Social Listing Shopping Web PHP Template 2.3.2 Privilege Escalation

==================================================================================================================================== | Title : Bazaar | Social Listing Shopping Web PHP Template v2.3.2 Privilege Escalation Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.P...

CVE-2021-4413

The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save field icons via a...

CVE-2021-4413 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass

The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save field icons via a...

WordPress Plugin Process Steps Template Designer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

PT-2023-12525 · WordPress · Process Steps Template Designer

Name of the Vulnerable Software and Affected Versions: Process Steps Template Designer plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save function. This allows...

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

Privilege escalation

Active Template Library Elevation of Privilege Vulnerability...

PYSEC-2023-118

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability

...

CVE-2023-32055

CVE-2023-32055 is an Active Template Library Elevation of Privilege vulnerability with CVSSv3.1 base score 6.7 (Medium). It is a Local attack requiring HIGH privileges and no user interaction, with impact to confidentiality, integrity, and availability rated High. The entry references a Microsoft...

CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability

...

CVE-2023-35773

Cross-Site Request Forgery CSRF vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin = 3.1.2 versions...

CVE-2023-35773

Cross-Site Request Forgery CSRF vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin = 3.1.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin = 3.1.2 versions...

CVE-2023-35773

CVE-2023-35773 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Template Debugger plugin (Danny Hearnah - ChubbyNinjaa) affecting versions

CVE-2023-35773 WordPress Template Debugger Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin = 3.1.2 versions...

Arbitrary Code Execution

jfinal is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a lack of validation in the template function, which allows an attacker to execute malicious code into the system...

CVE-2023-35870

When creating a journal entry template in SAP S/4HANA Manage Journal Entry Template - versions S4CORE 104, 105, 106, 107, an attacker could intercept the save request and change the template, leading to an impact on confidentiality and integrity of the resource. Furthermore, a standard template...