PT-2024-15956 · WordPress · The Timeline Widget For Elementor

Name of the Vulnerable Software and Affected Versions: The Timeline Widget For Elementor Elementor Timeline, Vertical & Horizontal Timeline plugin for WordPress versions up to, and including, 1.5.3 Description: The issue is related to Stored Cross-Site Scripting via image URLs in the plugin's...

WordPress Plugin Timeline Widget For Elementor Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Timeline Widget For Elementor Elementor Timeline, Vertical & Horizontal Timeline Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0977 Patch priority Low CVSS severity Low 6.5 Developer...

CVE-2023-49926

app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...

PT-2023-31413 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.179 Description: The issue allows for XSS in the event timeline widget. This is due to a problem in the app/Lib/Tools/EventTimelineTool.php file. Recommendations: For versions prior to 2.4.179, update to version...

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2019-24411)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A...