CVE-2023-5703

The Gift Up Gift Cards for WordPress and WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'giftup' shortcode in all versions up to, and including, 2.20.1 due to insufficient input sanitization and output escaping on user supplied attributes. This make...

CVE-2023-5703 Gift Up Gift Cards for WordPress and WooCommerce <= 2.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Gift Up Gift Cards for WordPress and WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'giftup' shortcode in all versions up to, and including, 2.20.1 due to insufficient input sanitization and output escaping on user supplied attributes. This make...

CVE-2023-5703

CVE-2023-5703: Gift Up Gift Cards for WordPress and WooCommerce is vulnerable to stored XSS via the giftup shortcode in all versions up to 2.20.1 due to insufficient input sanitization and output escaping of user attributes. Exploitation requires authenticated attackers with contributor-level per...

CVE-2023-5703 Gift Up Gift Cards for WordPress and WooCommerce <= 2.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Gift Up Gift Cards for WordPress and WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'giftup' shortcode in all versions up to, and including, 2.20.1 due to insufficient input sanitization and output escaping on user supplied attributes. This make...

kernel: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq

In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the @sharedhcd to NULL before decrease the usage count by usbputhcd, this will cause the shared hcd not released...

PT-2023-29537 · Prestashop · Order Duplicator Module

Name of the Vulnerable Software and Affected Versions: Order Duplicator module for PrestaShop versions = 1.1.7 Description: The issue allows a guest to download personal information without restriction due to a lack of permissions control. This includes accessing data from the ps customer and ps...

PT-2023-32276 · WordPress · Gift Up Gift Cards For Wordpress/Woocommerce

Name of the Vulnerable Software and Affected Versions: Gift Up Gift Cards for WordPress and WooCommerce plugin versions up to, and including, 2.20.1 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'giftup' shortcod...

Mageia: Security Advisory (MGASA-2023-0308)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-3601

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue arises when the MST topology is removed during the reception of an MST down reply or MST up request sideband message. This can cause a race condition between threads, leading to a...

CVE-2023-5969

Mattermost fails to properly sanitize the request to /api/v4/redirectlocation allowing an attacker, sending a specially crafted request to /api/v4/redirectlocation, to fill up the memory due to caching large items...

Cross site request forgery (csrf)

Mattermost fails to properly sanitize the request to /api/v4/redirectlocation allowing an attacker, sending a specially crafted request to /api/v4/redirectlocation, to fill up the memory due to caching large items...

CVE-2023-46780

A vulnerability in Alter Alter alter.This issue affects Alter: from n/a through = 1.0...

CVE-2023-47186

A vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer.This issue affects Kadence WooCommerce Email Designer: from n/a through = 1.5.11...

CVE-2023-46777

A vulnerability in PluginOps Feather Login Page feather-login-page.This issue affects Feather Login Page: from n/a through = 1.1.3...

CVE-2023-46781

Cross-Site Request Forgery CSRF vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin = 1.5 versions...

CVE-2023-47186

Cross-Site Request Forgery CSRF vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin = 1.5.11 versions...

CVE-2023-46775

Cross-Site Request Forgery CSRF vulnerability in Djo Original texts Yandex WebMaster plugin = 1.18 versions...

CVE-2023-46775

A vulnerability in Djo Original texts Yandex WebMaster original-texts-yandex-webmaster.This issue affects Original texts Yandex WebMaster: from n/a through = 1.18...

CVE-2023-46824

A vulnerability in Ankit Singla Slick Popup slick-popup.This issue affects Slick Popup: from n/a through = 1.7.14...

CVE-2023-46823

A vulnerability in Avirtum ImageLinks Interactive Image Builder imagelinks-interactive-image-builder-lite.This issue affects ImageLinks Interactive Image Builder: from n/a through = 1.5.4...