737 matches found
Notion Web Clipper Command Injection Vulnerability
Notion is an application from Notion that integrates notes, knowledge base, data forms, Kanban, calendars, and many other capabilities into one application. A command injection vulnerability exists in Notion Web Clipper version 1.0.3, which stems from a NIB file that can be manipulated to execute...
WordPress Autotitle for WordPress Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software Autotitle for WordPress Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-6946 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 89d669161c10 Credits Daniel Ruf...
WordPress plugin Autotitle security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2024-14848 · WordPress · Wp-Adv-Quiz
Name of the Vulnerable Software and Affected Versions: Wp-Adv-Quiz WordPress plugin versions prior to 1.0.3 Description: The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks, even when unfiltered html is disallowed, due to the plugin not sanitizing and...
WordPress plugin WordPress Database Administrator security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...
WordPress BA Plus Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software BA Plus Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22286 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4a8287da299c Credits Dimas Maulana Required privilege...
WordPress plugin All in One B2B for WooCommerce security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
WordPress Simple Counter Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Simple Counter Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50377 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1fb7d6a42ed0 Credits Khalid Yusuf Required privilege...
CVE-2023-47814
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Waterloo Plugins BMI Calculator Plugin plugin = 1.0.3 versions...
WordPress BMI Calculator Plugin Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software BMI Calculator Plugin Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47814 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b0f7b4a20da1 Credits Ngô Thiên An ancorn from VNPT-VCI...
PT-2023-29365 · Unknown · Pressference Exporter
Name of the Vulnerable Software and Affected Versions: Pressference Exporter versions 1.0.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
Malicious code in atmos-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f378bc147196f8b9dfc477b3bc1c6af261257fb3a6f7812b89517a3b1a93778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-5687 Cross-Site Request Forgery (CSRF) in mosparo/mosparo
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
CVE-2023-45540
An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment field of the List of Leave requests page...
Jorani 注入漏洞
Jorani Leave Management System is a leave management system developed by Benjamin BALET, an individual developer in France. It is designed to provide small organizations with a simple workflow for leave and overtime requests. A cross-site scripting vulnerability exists in Jorani Leave Management...
PT-2023-29568 · Unknown · Jorani Leave Management System
Name of the Vulnerable Software and Affected Versions: Jorani Leave Management System version 1.0.3 Description: The issue allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment field of the List of Leave requests page. This can potentially lead to malicious...
PT-2023-29618 · Unknown · Caret Country Access Limit
Name of the Vulnerable Software and Affected Versions: Caret Country Access Limit plugin versions prior to 1.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application...
CVE-2023-41853
Cross-Site Request Forgery CSRF vulnerability in WP iCal Availability plugin = 1.0.3 versions...