WordPress plugin DW Promobar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress plugin Microsoft Advertising Universal Event Tracking (UET) 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2022-36752

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file...

png2webp 缓冲区错误漏洞

png2webp is a simple command line converter from Lucinda May Phipps personal developer. It is used to batch process PNG to WebP. A security vulnerability exists in png2webp version v1.0.4, which stems from the discovery of out-of-bounds writes via the w2p function...

PT-2022-23605 · Png2Webp · Png2Webp

Name of the Vulnerable Software and Affected Versions: png2webp version 1.0.4 Description: The issue is related to an out-of-bounds write via the function w2p. This can be exploited through a crafted png file. Recommendations: For png2webp version 1.0.4, consider disabling the w2p function until ...

E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRF

The plugin is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST",...

DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Put the following payload in any of the plugin settings...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

Cross site scripting

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

miniOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site Scripting

The plugin does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and perform Cross-Site Scripting attacks v ' / v...

CVE-2022-0625

The Admin Menu Editor WordPress plugin through 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

WordPress plugin Admin Menu Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2022-13851 · WordPress · Cab Fare Calculator

Name of the Vulnerable Software and Affected Versions: Cab fare calculator WordPress plugin versions prior to 1.0.4 Description: The issue is related to the lack of validation of the controller parameter, which is used in require statements. This could lead to Local File Inclusion issues...

Cab fare calculator < 1.0.4 - Unauthenticated LFI

The plugin does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues. Despite what the original advisory claims, the issue is not exploitable by accessing the file directly as a fatal error is triggered before the vulnerable...

WordPress Rate limiting for Contact Form 7 plugin < 1.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Rate limiting for Contact Form 7 plugin versions 1.0.4. Solution Update the WordPress Rate limiting for Contact Form 7 plugin to the latest available version at least 1.0.4...

Binaryen 安全漏洞

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C. A security vulnerability exists in Binaryen version 104, which stems from an assertion abort in wasm::WasmBinaryBuilder::readFunctions in the software, and could be exploited by an attacker to cause a denial...

CVE-2021-24908

The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the Check ...