Lucene search
+L

408 matches found

CNNVD
CNNVD
added 2024/09/17 12:00 a.m.6 views

WordPress plugin Share This Image 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabili...

7.2CVSS6.5AI score0.00471EPSS
SaveExploits0References7
NVD
NVD
added 2024/09/05 9:15 a.m.36 views

CVE-2024-8363

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shortcode in all versions up to, and including, 2.02 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00418EPSS
SaveExploits0References4
CVE
CVE
added 2024/09/05 8:30 a.m.58 views

CVE-2024-8363

CVE-2024-8363 concerns the WordPress plugin Share This Image. It describes a Stored Cross-Site Scripting (XSS) flaw in the STI Buttons shortcode present in versions up to and including 2.02, caused by insufficient input sanitization and output escaping of user-supplied attributes. The issue requi...

6.4CVSS5.5AI score0.00418EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
added 2024/09/05 2:58 a.m.9 views

WordPress Share This Image plugin <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via STI Buttons Shortcode vulnerability discovered by Krzysztof Zając in WordPress Plugin Share This Image versions = 2.02...

6.4CVSS5.8AI score0.00418EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/05 12:00 a.m.24 views

WordPress Share This Image Plugin <= 2.02 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 2.02 Fixed in 2.03 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8363 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1f926f6e8d27 Credits Krzysztof Zając Required...

6.4CVSS5.8AI score0.00418EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/09/02 3:48 a.m.11 views

WordPress Share This Image plugin <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via alignment Parameter vulnerability discovered by Francesco Carlucci in WordPress Plugin Share This Image versions = 2.01...

6.4CVSS5.8AI score0.00382EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/02 12:00 a.m.14 views

WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8108 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ce0f588ce2a5 Credits Francesco Carlucci Requir...

6.4CVSS5.8AI score0.00382EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/31 8:35 a.m.9 views

CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS5.8AI score0.00382EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/08/31 8:35 a.m.32 views

CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS0.00382EPSS
SaveExploits0References6
CVE
CVE
added 2024/08/31 8:35 a.m.65 views

CVE-2024-8108

The CVE-2024-8108 entry concerns the WordPress plugin Share This Image. It is a Stored Cross-Site Scripting (XSS) vulnerability in the alignment parameter affecting all versions up to 2.01, exploitable by authenticated attackers with Contributor-level access and above. The issue is caused by insu...

6.4CVSS5.5AI score0.00382EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/31 12:00 a.m.14 views

PT-2024-38807 · WordPress · Share This Image

Name of the Vulnerable Software and Affected Versions: Share This Image plugin for WordPress versions up to, and including, 2.01 Description: The issue is related to Stored Cross-Site Scripting via the alignment parameter due to insufficient input sanitization and output escaping. This allows...

6.4CVSS5.9AI score0.00382EPSS
SaveExploits0References13
Microsoft KB
Microsoft KB
added 2024/08/13 7:00 a.m.75 views

June 11, 2024—KB5039260 (Monthly Rollup)

None None...

9.8CVSS6.8AI score0.81729EPSS
SaveExploits10
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:43 p.m.7 views

Malicious code in this-is-fine-wuzzi (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:04 p.m.4 views

Malicious code in this-will-fail (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2024/05/07 12:00 a.m.24 views

Share This Image < 1.99 - Open Redirect

Description The plugin is vulnerable to Open Redirect due to insufficient validation on a redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

4.7CVSS4.7AI score0.00384EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/05/02 11:15 a.m.26 views

CVE-2024-33930

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

4.7CVSS5.1AI score0.00384EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/02 11:00 a.m.13 views

CVE-2024-33930 WordPress Share This Image plugin <= 1.97 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

4.7CVSS5.2AI score0.00384EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/02 11:00 a.m.32 views

CVE-2024-33930 WordPress Share This Image plugin <= 1.97 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

4.7CVSS5.4AI score0.00384EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/02 11:00 a.m.79 views

CVE-2024-33930

CVE-2024-33930 is a URL Open Redirect in the Share This Image WordPress plugin. The vulnerability affects Share This Image versions up to 1.97 (per the CVE entry) and is classified as an Open Redirect with network attack vector and user interaction required. Red Hat and Wordfence references in co...

4.7CVSS5.2AI score0.00384EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/29 4:24 p.m.12 views

WordPress Share This Image plugin <= 1.98 - Open Redirection vulnerability

Open Redirection vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Share This Image versions = 1.98...

4.7CVSS7AI score0.00384EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder