30 matches found
CVE-2024-33695 WordPress Fan Page Widget by ThemeNcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode Fan Page Widget by ThemeNcode allows Stored XSS.This issue affects Fan Page Widget by ThemeNcode: from n/a through 2.0...
CVE-2024-33695
CVE-2024-33695 pertains to ThemeNcode Fan Page Widget (ThemeNcode). The Red Hat advisory (RH: CVE-2024-33695) confirms a stored XSS in the widget caused by improper neutralization of input during web page generation, affecting Fan Page Widget by ThemeNcode up to version 2.0. The initial descripti...
WordPress Fan Page Widget by ThemeNcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Fan Page Widget by ThemeNcode versions = 2.0...
WordPress plugin Fan Page Widget by ThemeNcode 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Fan Pag...
WordPress Fan Page Widget by ThemeNcode Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software Fan Page Widget by ThemeNcode Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33695 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 65bb7cdeaec7 Credits Joshua Chan Required privile...
PT-2024-25451 · Themencode · Fan Page Widget
Name of the Vulnerable Software and Affected Versions: Fan Page Widget by ThemeNcode versions n/a through 2.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...
CVE-2024-25097
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 2.8.0...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 2.8.0...
CVE-2024-25097
CVE-2024-25097 describes a Stored XSS vulnerability in the WordPress plugin TNC PDF viewer (ThemeNcode) up to version 2.8.0, caused by improper input neutralization during web page generation. The issue affects the TNC PDF viewer before 2.9.0 and could allow attackers to store and execute malicio...
CVE-2024-25097 WordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 2.8.0...