397 matches found
CVE-2024-47326 WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...
WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Share This Image versions = 2.01...
WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)
Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47326 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a0ec6e566511 Credits Dimas Maulana Required privilege...
CVE-2024-8761
The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...
CVE-2024-8761 Share This Image <= 2.03 - Open Redirect via link Parameter
The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...
CVE-2024-8761
The CVE-2024-8761 entry describes an Open Redirect in the WordPress plugin Share This Image for versions up to 2.03, caused by insufficient validation of the link parameter. This enables unauthenticated attackers to redirect users to potentially malicious sites. Remediation: upgrade to version 2....
WordPress Share This Image plugin <= 2.03 - Open Redirect via link Parameter vulnerability
Open Redirect via link Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin Share This Image versions = 2.03...
WordPress Share This Image Plugin <= 2.03 is vulnerable to Open Redirection
Software Share This Image Type Plugin Vulnerable versions = 2.03 Fixed in 2.04 OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2024-8761 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 2b483c93b8d5 Credits Krzysztof Zając Required privilege Unauthenticat...
WordPress plugin Share This Image 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabili...
PT-2024-39234 · WordPress · Share This Image
Name of the Vulnerable Software and Affected Versions: Share This Image plugin for WordPress versions up to, and including, 2.03 Description: The issue is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to...
CVE-2024-8363
The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shortcode in all versions up to, and including, 2.02 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-8363
CVE-2024-8363 concerns the WordPress plugin Share This Image. It describes a Stored Cross-Site Scripting (XSS) flaw in the STI Buttons shortcode present in versions up to and including 2.02, caused by insufficient input sanitization and output escaping of user-supplied attributes. The issue requi...
WordPress Share This Image plugin <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via STI Buttons Shortcode vulnerability discovered by Krzysztof Zając in WordPress Plugin Share This Image versions = 2.02...
WordPress Share This Image Plugin <= 2.02 is vulnerable to Cross Site Scripting (XSS)
Software Share This Image Type Plugin Vulnerable versions = 2.02 Fixed in 2.03 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8363 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1f926f6e8d27 Credits Krzysztof Zając Required...
WordPress Share This Image plugin <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via alignment Parameter vulnerability discovered by Francesco Carlucci in WordPress Plugin Share This Image versions = 2.01...
WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)
Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8108 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ce0f588ce2a5 Credits Francesco Carlucci Requir...
CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2024-8108
The CVE-2024-8108 entry concerns the WordPress plugin Share This Image. It is a Stored Cross-Site Scripting (XSS) vulnerability in the alignment parameter affecting all versions up to 2.01, exploitable by authenticated attackers with Contributor-level access and above. The issue is caused by insu...
CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
PT-2024-38807 · WordPress · Share This Image
Name of the Vulnerable Software and Affected Versions: Share This Image plugin for WordPress versions up to, and including, 2.01 Description: The issue is related to Stored Cross-Site Scripting via the alignment parameter due to insufficient input sanitization and output escaping. This allows...