Lucene search
+L

51 matches found

Patchstack
Patchstack
•added 2024/04/05 11:18 a.m.•11 views

WordPress Tracking Code Manager plugin <= 2.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Tracking Code Manager versions = 2.1.0...

4.3CVSS7.1AI score0.00277EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/05 12:00 a.m.•27 views

WordPress Tracking Code Manager Plugin <= 2.1.0 is vulnerable to Broken Access Control

Software Tracking Code Manager Type Plugin Vulnerable versions = 2.1.0 Fixed in 2.2.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31347 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 51665fb13771 Credits Abdi Pranata Required...

4.3CVSS6.8AI score0.00277EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/03/21 5:15 p.m.•20 views

CVE-2024-2579

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.0.16...

5.9CVSS5.9AI score0.00319EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/21 4:50 p.m.•32 views

CVE-2024-2579 WordPress Tracking Code Manager plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.0.16...

5.9CVSS6.1AI score0.00319EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/21 4:50 p.m.•19 views

CVE-2024-2579 WordPress Tracking Code Manager plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.0.16...

5.9CVSS8.6AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/21 4:50 p.m.•88 views

CVE-2024-2579

CVE-2024-2579 — WordPress Tracking Code Manager: Cross-Site Scripting due to improper input neutralization in Tracking Code Manager, versions n/a through 2.0.16. Root cause: lack of proper input handling during web page generation. Impact: XSS risk for sites using the vulnerable plugin (severity ...

5.9CVSS8.6AI score0.00319EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/03/21 12:00 a.m.•17 views

PT-2024-21136 · Data443 · Data443 Tracking Code Manager

Name of the Vulnerable Software and Affected Versions: Data443 Tracking Code Manager versions n/a through 2.0.16 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for the injection of malicious scripts...

5.9CVSS9.7AI score0.00319EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•1 views

CVE-2024-2579: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.0.16...

5.9CVSS5.8AI score0.00319EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/21 12:00 a.m.•14 views

WordPress Plugin Tracking Code Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

5.9CVSS7.9AI score0.00319EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/03/18 12:00 a.m.•16 views

WordPress Tracking Code Manager Plugin <= 2.0.16 is vulnerable to Cross Site Scripting (XSS)

Software Tracking Code Manager Type Plugin Vulnerable versions = 2.0.16 Fixed in 2.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-2579 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5ffb225ee347 Credits Joshua Chan Required privilege...

5.9CVSS6.7AI score0.00319EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
•added 2017/05/11 12:00 a.m.•12 views

Tracking Code Manager <= 1.11.1 - Authenticated XSS, CSRF & DoS

The Tracking Code Manager WordPress plugin was affected by an Authenticated XSS, CSRF & DoS security vulnerability...

3.2AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder