CVE-2024-54439

Cross-Site Request Forgery CSRF vulnerability in Alok Tiwari Amazon Product Price amazon-product-price allows Stored XSS.This issue affects Amazon Product Price: from n/a through = 1.1...

CVE-2024-54404

Cross-Site Request Forgery CSRF vulnerability in Nazmul Ahsan MDC Comment Toolbar mdc-comment-toolbar allows Stored XSS.This issue affects MDC Comment Toolbar: from n/a through = 1.1...

CVE-2024-54400 WordPress AppMaps plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in meloniq AppMaps appmaps allows Stored XSS.This issue affects AppMaps: from n/a through = 1.1...

CVE-2024-54404

CVE-2024-54404 affects the MDC Comment Toolbar WordPress plugin. Affected: MDC Comment Toolbar

CVE-2024-54433

CVE-2024-54433 describes a CSRF vulnerability in the Simple Booking Widget that can lead to stored XSS. Affected software is Simple Booking Widget (version range from n/a through 1.1). Connected sources confirm the issue and indicate patch status as Unpatched; no public exploitation status is pro...

CVE-2024-54439

CVE-2024-54439 is a CSRF to Stored XSS vulnerability in the Amazon Product Price WordPress plugin. Affected software: Amazon Product Price (WordPress). Reported issue links indicate CSRF could trigger Stored XSS, enabling execution of arbitrary scripts in victim sessions. CVSSv3.1 base score 7.1 ...

WordPress plugin Amazon Product Price 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-36307 · Unknown · Mansur Ahamed Ui Slider Filter By Price

Name of the Vulnerable Software and Affected Versions: Mansur Ahamed Ui Slider Filter By Price versions n/a through 1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This means an attacker can trick a user into performing...

WordPress plugin LaunchPage.app Importer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A SQL injection...

PT-2024-36323 · Unknown · Simple Booking Widget

Name of the Vulnerable Software and Affected Versions: Simple Booking Widget versions n/a through 1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Simple Booking Simple Booking Widget, which allows Stored XSS. Recommendations: For versions n/a through 1.1, update t...

WordPress plugin Check Pincode For Woocommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

CVE-2024-12481

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

WordPress HostFact bestelformulier integratie plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin HostFact bestelformulier integratie versions = 1.1...

WordPress plugin HostFact bestelformulier integratie 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Check Pincode For Woocommerce plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Check Pincode For Woocommerce versions = 1.1...

PT-2024-35757 · Phpgurukul · Phpgurukul Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul's Beauty Parlour Management System version 1.1 Description: The issue concerns SQL Injection in the login.php file through the emailcont parameter. This allows for potential exploitation by injecting malicious SQL code...

WordPress plugin AI Quiz 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

WordPress plugin Content Audit Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-35841 · WordPress · Wp Wox Footer Flyout Widget

Name of the Vulnerable Software and Affected Versions: WP WOX Footer Flyout Widget versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored Cross Site Scripting XSS in the WP WOX Footer Flyout Widget. This means an attacker can perform...

Security Bulletin: IBM Data Virtualization Manager for z/OS has a remote code execution (RCE) vulnerability

Summary IBM Data Virtualization Manager for z/OS has a remote code execution RCE vulnerability. Vulnerability Details CVEID:CVE-2024-52899 DESCRIPTION: IBM Data Virtualization Manager for z/OS could allow an authenticated user to inject malicious JDBC URL parameters and execute code on the server...