WordPress URLYar plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin URLYar URL Shortner versions = 1.1.0...

WordPress plugin URLYar URL Shortner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site...

CVE-2024-0525

CXBSoft Url-shorting up to 1.3.1 has a SQL injection in the HTTP POST Request Handler (file /pages/long_s_short.php) via the longurl parameter. The vulnerability is rated critical (CVSS 3.x: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with remote exploitation disclosed publicly; vendor did not respond. ...