CVE-2023-25961

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Catch Themes Darcie theme = 1.1.5 versions...

CVE-2023-25961

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Catch Themes Darcie theme = 1.1.5 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Catch Themes Darcie theme = 1.1.5 versions...

CVE-2023-25961

CVE-2023-25961 is an unauthenticated, reflected cross-site scripting (XSS) vulnerability in Catch Themes’ Darcie WordPress theme, affecting versions up to 1.1.5. The issue is triggered through user-supplied input reflected in the page, enabling an attacker to execute script in the victim’s browse...

CVE-2023-25961 WordPress Darcie Theme <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Catch Themes Darcie theme = 1.1.5 versions...

PT-2023-20388 · Catch Themes · Catch Themes Darcie

Name of the Vulnerable Software and Affected Versions: Catch Themes Darcie theme versions 1.1.5 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

Malicious code in skyscanner-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e80c6a572898c77cc6e5b4c0266cc4805778ec35102f514669accd32b0664f0 The OpenSSF Package Analysis project identified 'skyscanner-themes' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1297 Malicious code in skyscanner-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e80c6a572898c77cc6e5b4c0266cc4805778ec35102f514669accd32b0664f0 The OpenSSF Package Analysis project identified 'skyscanner-themes' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2022-25278

Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules...

CVE-2022-25278

Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules...

UBUNTU-CVE-2022-25278

Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules...

CVE-2022-25278

Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules...

CVE-2023-27619

Auth subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Macho Themes Regina Lite theme = 2.0.7 versions...

CVE-2023-27619

Auth subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Macho Themes Regina Lite theme = 2.0.7 versions...

Cross site scripting

Auth subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Macho Themes Regina Lite theme = 2.0.7 versions...

CVE-2023-27619

CVE-2023-27619 affects Regina Lite WordPress theme (≤ 2.0.7). Described as a reflected Cross‑Site Scripting (XSS) vulnerability that is exploitable by authenticated users with Subscriber+ privileges. Impact per sources is limited to reflected XSS in pages, with the vulnerability tied to input ref...

CVE-2023-27619 WordPress Regina Lite Theme <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)

Auth subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Macho Themes Regina Lite theme = 2.0.7 versions...

PT-2023-21257 · Macho Themes · Regina Lite

Name of the Vulnerable Software and Affected Versions: Macho Themes Regina Lite theme versions prior to 2.0.8 Description: A Reflected Cross-Site Scripting XSS vulnerability exists, allowing attackers to inject malicious scripts into pages. This issue affects authenticated users with subscriber o...

Wordfence Intelligence Weekly WordPress Vulnerability Report (Apr 10, 2023 to Apr 16, 2023)

Last week, there were 69 vulnerabilities disclosed in 60 WordPress plugins and 4 WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 32 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities i...

@nuxtlabs/github-module made Use of Hard-coded Credentials

https://nuxt.com had a hardcoded GitHub token in the source code of the page. This token had access to multiple repositories under nuxt, nuxtlabs and nuxt-themes GitHub organizations. A patch in version 1.6.2 fixed the issue...