1017 matches found
WordPress plugin Common Tools for Site 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
Gigastone TR1 Travel Router R101 安全漏洞
The Gigastone TR1 Travel Router R101 is a wireless router from Gigastone. A security vulnerability exists in the Gigastone TR1 Travel Router R101 v1.0.2. An authenticated attacker can exploit this vulnerability to execute arbitrary commands on the device by sending a crafted HTTP request to the...
WordPress plugin Graphicsly 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
PT-2024-39404 · WordPress · Graphicsly
Name of the Vulnerable Software and Affected Versions: The Graphicsly plugin for WordPress versions up to, and including, 1.0.2 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows authenticat...
WordPress Graphicsly Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Graphicsly Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9069 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3a3c5689bee9 Credits Francesco Carlucci Required...
Malicious code in dcnm-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60cebc6f07c7ce4ba095946f2ee01997897e8acdaaa926a98ee8c6a66aff97f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-38770 · Infolinks · Infolinks Ad Wrap Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: infolinks Ad Wrap WordPress plugin versions 1.0.0 through 1.0.2 Description: The issue is related to the lack of CSRF protection when updating settings in the infolinks Ad Wrap WordPress plugin. This could allow attackers to make a logged-in...
WordPress Chatbot Support AI plugin <= 1.0.2 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Kieran Burge in WordPress Plugin Chatbot Support AI versions = 1.0.2...
WordPress plugin Chatbot Support AI 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Theme ReviveNews versions = 1.0.2...
WordPress TrueBooker plugin <= 1.0.2 - Multiple Unauthenticated SQLi vulnerability
Multiple Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin TrueBooker versions = 1.0.2...
Malicious code in job-specs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 33cc6191f6fbd8274e7eb5fe159654ded5d7fadbdc6fe26dbb62b26c0ddd42ed The OpenSSF Package Analysis project identified 'job-specs' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
vaeThink Security Vulnerabilities
vaeThink is a software application. Based on ThinkPHP5 and Layui, while keeping the core concept of rapid development and simplicity, vaeThink provides basic development and encapsulation of functions necessary for general projects, helping users to quickly complete the basic functions when...
WordPress plugin Default Thumbnail Plus security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
PT-2024-28298 · Vaethink · Vaethink
Name of the Vulnerable Software and Affected Versions: vaeThink version 1.0.2 Description: The issue is related to stored Cross Site Scripting XSS in the system backend. This means that an attacker can inject malicious scripts into the system, which can then be executed by other users, potentiall...
vaeThink Security Vulnerabilities
vaeThink is a software application. Based on ThinkPHP5 and Layui development, while keeping the core concepts of rapid development and the road to simplicity unchanged, it provides basic development and encapsulation of the functions necessary for general projects, helping users to quickly comple...
WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Demo Awesome versions = 1.0.2...
WordPress plugin MIMO Woocommerce Order Tracking security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
WordPress MIMO Woocommerce Order Tracking plugin <= 1.0.2 - Authenticated Stored Cross-Site Scripting vulnerability
Authenticated Stored Cross-Site Scripting vulnerability discovered by Lucio Sá in WordPress Plugin MIMO Woocommerce Order Tracking versions = 1.0.2...
