WordPress Plugin PowerPack Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in...

code.edu.az Cross Site Scripting vulnerability OBB-3902857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

estatesales.org Cross Site Scripting vulnerability OBB-3899147

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

flatland.ai Cross Site Scripting vulnerability OBB-3898482

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gchss.edu.mt Cross Site Scripting vulnerability OBB-3897541

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

village.edu.gt Cross Site Scripting vulnerability OBB-3897351

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pappous.edu.gr Cross Site Scripting vulnerability OBB-3896924

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

careerlauncher.com Cross Site Scripting vulnerability OBB-3895924

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress PowerPack Addons for Elementor plugin <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Twitter Tweet Widget vulnerability discovered by wesley wcraft in WordPress Plugin PowerPack Addons for Elementor versions = 2.7.18...

CVE-2024-31101

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...

CVE-2024-30553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joby Joseph WP Twitter Mega Fan Box Widget allows Stored XSS.This issue affects WP Twitter Mega Fan Box Widget : from n/a through 1.0...

CVE-2024-30553

CVE-2024-30553 is a stored XSS in the WP Twitter Mega Fan Box Widget for WordPress. The vulnerability arises from improper input neutralization during web page generation, affecting the WP Twitter Mega Fan Box Widget versions up to 1.0 (older than 1.0). The connected Red Hat advisory confirms the...

CVE-2024-31101 WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...

CVE-2024-31101

CVE-2024-31101 is an stored XSS in the AI Twitter Feeds WordPress plugin (Twitter widget & shortcode) affecting versions up to 2.4. The issue is described as improper neutralization during web page generation. Public data from Patchstack/NVD indicates CVSSv3.1 base score 6.5 (MEDIUM), with attack...

CVE-2024-31101 WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...

PT-2024-23770 · August Infotech · August Infotech Ai Twitter Feeds

Name of the Vulnerable Software and Affected Versions: August Infotech AI Twitter Feeds Twitter widget & shortcode versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...

WordPress Plugin AI Twitter Feeds 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin AI Twitter Feeds A...

WordPress Plugin WP Twitter Mega Fan Box Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WP Twitter Mega Fan Box...

PT-2024-23483 · WordPress · Wp Twitter Mega Fan Box Widget

Name of the Vulnerable Software and Affected Versions: WP Twitter Mega Fan Box Widget versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS, enabling attackers to...

WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin AI Twitter Feeds Twitter widget & shortcode versions = 2.4...