CVE-2023-28497

Cross-Site Request Forgery CSRF vulnerability in Tribulant Slideshow Gallery LITE plugin = 1.7.6 versions...

CVE-2023-44257

Cross-Site Request Forgery CSRF vulnerability in Hometory Mang Board WP plugin = 1.7.6 versions...

CVE-2023-38476

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login plugin = 1.7.6 versions...

CVE-2023-38476

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login plugin = 1.7.6 versions...

WordPress plugin Client Portal : SuiteDash Direct Login Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Client Portal : SuiteDash...

CVE-2023-24412

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Web-Settler Image Social Feed plugin = 1.7.6 versions...

WordPress plugin Image Social Feed Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2023-34377

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joseph C Dolson My Content Management plugin = 1.7.6 versions...

PT-2023-24849 · Joseph C Dolson · My Content Management

Name of the Vulnerable Software and Affected Versions: Joseph C Dolson My Content Management plugin versions 1.7.6 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions...

WordPress plugin My Content Management cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Page scroll to id Plugin < 1.7.6 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pagescrolltoidproject:pagescrolltoid"; if description...

CVE-2023-25979

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Video Gallery by Total-Soft Video Gallery plugin = 1.7.6 versions...

Monitorr 跨站脚本漏洞

Monitorr is Monitorr open source a web front-end . Used to display the status of any web application or service in real time . A cross-site scripting vulnerability exists in Monitorr version v.1.7.6. A remote attacker can exploit this vulnerability to execute arbitrary code...

PT-2023-20791 · Monitorr · Monitorr

Name of the Vulnerable Software and Affected Versions: Monitorr version 1.7.6 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the title parameter of the "post receiver-services.php" file. This enables the attacker to inject malicious scripts into t...

Monitorr 代码问题漏洞

Monitorr is Monitorr open source a web front-end . Used to display the status of any web application or service in real time . A security vulnerability exists in Monitorr version v.1.7.6. A remote attacker could exploit this vulnerability to execute arbitrary code via specially crafted files...

Unified Automation OPC UA C++Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted OPC UA message that can...

WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection

Software Slideshow Gallery Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-28491 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID 9644393e25c7 Credits minhtuanact Required privilege Administrator...

WordPress plugin List Pages Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-0747 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

BTCPay Server 跨站脚本漏洞

BTCPay Server is a self-hosted open source cryptocurrency payment processor. It is secure, private, uncensored and free. A cross-site scripting vulnerability exists in BTCPay Server versions prior to 1.7.6, which stems from the presence of stored cross-site scripting XSS...