CVE-2024-39663

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.68.232...

CVE-2024-39663 WordPress WP Fast Total Search plugin <= 1.68.232 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.68.232...

WordPress WP Fast Total Search plugin <= 1.68.232 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Plugin WP Fast Total Search versions = 1.68.232...

WordPress WP Fast Total Search Plugin <= 1.68.232 is vulnerable to Cross Site Scripting (XSS)

Software WP Fast Total Search Type Plugin Vulnerable versions = 1.68.232 Fixed in 1.69.234 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39663 Patch priority Medium CVSS severity Medium 7.1 Developer Epsiloncool PSID e7e1ae669a97 Credits justakazh Required...

PT-2024-28602 · WordPress · Wp Fast Total Search

Name of the Vulnerable Software and Affected Versions: WP Fast Total Search versions 1.68.232 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations:...

VulnCheck KEV: CVE-2024-39663

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.68.232...

WordPress plugin WP Fast Total Search 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

(0Day) F-Secure Total Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of F-Secure Total. User interaction on the part of an administrator is required to exploit this vulnerability. The specific flaw exists within the WithSecure plugin hosting service. By creating a symbolic...

PT-2024-9205 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions 16.0.53 Description: The issue is related to an Uncontrolled Search Path Element in the McAfee Direct Stub Installer, which can allow an attacker to elevate their privileges and execute arbitrary code. This ca...

WordPress WP Fast Total Search <= 1.69.234 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin WP Fast Total Search versions = 1.69.234...

WordPress WP Fast Total Search Plugin <= 1.69.234 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Fast Total Search Type Plugin Vulnerable versions = 1.69.234 Fixed in 1.70.236 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-38778 Patch priority Low CVSS severity Low 4.3 Developer Epsiloncool PSID 7430c079e28f Credits Majed Refaea...

CVE-2024-6625

The WP Total Branding – Complete branding solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-6625

CVE-2024-6625 concerns the WP Total Branding – Complete branding solution for WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw in admin settings present in all versions up to 1.2, caused by insufficient input sanitization and output escaping. Attack requires authent...

WordPress WP Total Branding plugin <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via title Parameter vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via title Parameter vulnerability discovered by Artem Polynko Artem Polynko in WordPress Plugin WP Total Branding versions = 1.2...

WordPress WP Total Branding Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Total Branding Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6625 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a7d5303cf6ee Credits Artem Polynko Artem Polynk...

WordPress plugin WP Total Branding security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress WP Fast Total Search <= 1.68.232 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin WP Fast Total Search versions = 1.68.232...

WordPress WP Fast Total Search Plugin <= 1.68.232 is vulnerable to Broken Access Control

Software WP Fast Total Search Type Plugin Vulnerable versions = 1.68.232 Fixed in 1.69.234 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38714 Patch priority Low CVSS severity Low 4.3 Developer Epsiloncool PSID 00f4bc37a87e Credits Majed Refaea Required...

Siemens Engineering Platforms Catalog Configuration File Deserialization Vulnerability

Totally Integrated Automation Portal TIA Portal is PC software that offers the complete range of Siemens digital automation services, from digital planning and integrated engineering to transparent operation. A deserialization vulnerability in the Siemens Engineering Platforms catalog configurati...

CVE-2024-34027 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover reserve,releasecompressblocks w/ cprwsem lock It needs to cover reserve,releasecompressblocks w/ cprwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode...