Lucene search
+L

397 matches found

Cvelist
Cvelist
added 2024/10/06 11:7 a.m.27 views

CVE-2024-47326 WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...

7.1CVSS0.00302EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/09/25 11:20 a.m.6 views

WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Share This Image versions = 2.01...

7.1CVSS6.1AI score0.00302EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/09/25 12:0 a.m.16 views

WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47326 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a0ec6e566511 Credits Dimas Maulana Required privilege...

7.1CVSS6.5AI score0.00302EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/09/17 9:15 a.m.22 views

CVE-2024-8761

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

7.2CVSS0.00444EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2024/09/17 8:30 a.m.10 views

CVE-2024-8761 Share This Image <= 2.03 - Open Redirect via link Parameter

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

7.2CVSS6.8AI score0.00444EPSS
Exploits0References6
CVE
CVE
added 2024/09/17 8:30 a.m.63 views

CVE-2024-8761

The CVE-2024-8761 entry describes an Open Redirect in the WordPress plugin Share This Image for versions up to 2.03, caused by insufficient validation of the link parameter. This enables unauthenticated attackers to redirect users to potentially malicious sites. Remediation: upgrade to version 2....

7.2CVSS6.6AI score0.00444EPSS
Exploits0References6Affected Software1
Patchstack
Patchstack
added 2024/09/17 3:12 a.m.8 views

WordPress Share This Image plugin <= 2.03 - Open Redirect via link Parameter vulnerability

Open Redirect via link Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin Share This Image versions = 2.03...

7.2CVSS7AI score0.00444EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/17 12:0 a.m.12 views

WordPress Share This Image Plugin <= 2.03 is vulnerable to Open Redirection

Software Share This Image Type Plugin Vulnerable versions = 2.03 Fixed in 2.04 OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2024-8761 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 2b483c93b8d5 Credits Krzysztof Zając Required privilege Unauthenticat...

7.2CVSS6.9AI score0.00444EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/09/17 12:0 a.m.4 views

WordPress plugin Share This Image 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabili...

7.2CVSS6.5AI score0.00444EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/09/17 12:0 a.m.5 views

PT-2024-39234 · WordPress · Share This Image

Name of the Vulnerable Software and Affected Versions: Share This Image plugin for WordPress versions up to, and including, 2.03 Description: The issue is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to...

7.2CVSS7.1AI score0.00444EPSS
Exploits0References15
NVD
NVD
added 2024/09/05 9:15 a.m.32 views

CVE-2024-8363

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shortcode in all versions up to, and including, 2.02 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00394EPSS
Exploits0References4
CVE
CVE
added 2024/09/05 8:30 a.m.52 views

CVE-2024-8363

CVE-2024-8363 concerns the WordPress plugin Share This Image. It describes a Stored Cross-Site Scripting (XSS) flaw in the STI Buttons shortcode present in versions up to and including 2.02, caused by insufficient input sanitization and output escaping of user-supplied attributes. The issue requi...

6.4CVSS5.5AI score0.00394EPSS
Exploits0References4Affected Software1
Patchstack
Patchstack
added 2024/09/05 2:58 a.m.6 views

WordPress Share This Image plugin <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via STI Buttons Shortcode vulnerability discovered by Krzysztof Zając in WordPress Plugin Share This Image versions = 2.02...

6.4CVSS5.8AI score0.00394EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/05 12:0 a.m.19 views

WordPress Share This Image Plugin <= 2.02 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 2.02 Fixed in 2.03 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8363 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1f926f6e8d27 Credits Krzysztof Zając Required...

6.4CVSS5.8AI score0.00394EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2024/09/02 3:48 a.m.7 views

WordPress Share This Image plugin <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via alignment Parameter vulnerability discovered by Francesco Carlucci in WordPress Plugin Share This Image versions = 2.01...

6.4CVSS5.8AI score0.0036EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/02 12:0 a.m.9 views

WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8108 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ce0f588ce2a5 Credits Francesco Carlucci Requir...

6.4CVSS5.8AI score0.0036EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/08/31 8:35 a.m.22 views

CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS0.0036EPSS
Exploits0References6
CVE
CVE
added 2024/08/31 8:35 a.m.53 views

CVE-2024-8108

The CVE-2024-8108 entry concerns the WordPress plugin Share This Image. It is a Stored Cross-Site Scripting (XSS) vulnerability in the alignment parameter affecting all versions up to 2.01, exploitable by authenticated attackers with Contributor-level access and above. The issue is caused by insu...

6.4CVSS5.5AI score0.0036EPSS
Exploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/31 8:35 a.m.8 views

CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS5.8AI score0.0036EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/08/31 12:0 a.m.10 views

PT-2024-38807 · WordPress · Share This Image

Name of the Vulnerable Software and Affected Versions: Share This Image plugin for WordPress versions up to, and including, 2.01 Description: The issue is related to Stored Cross-Site Scripting via the alignment parameter due to insufficient input sanitization and output escaping. This allows...

6.4CVSS5.9AI score0.0036EPSS
Exploits0References13
Rows per page
Query Builder