35 matches found
CVE-2024-53709
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Uddin Generic Elements generic-elements-for-elementor allows DOM-Based XSS.This issue affects Generic Elements: from n/a through = 1.2.5...
CVE-2024-52464
CVE-2024-52464: Reflected XSS in WordPress plugin amr shortcodes (versions 1.7 and earlier). Root cause is improper input handling during web page generation, enabling an attacker-controlled input to be reflected in the output. Affected component: amr shortcodes. Impact: Reflected XSS risk on pag...
CVE-2024-51851
CVE-2024-51851 is a cross-site scripting vulnerability in the WordPress plugin Best Bootstrap Widgets for Elementor (versions up to 1.0). The issue stems from improper input neutralization during web page generation, enabling DOM-based XSS. The connected sources indicate the plugin is affected up...
CVE-2024-47306
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection-subscribe-to-view allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking:...
CVE-2024-38677
REVIEWS.io for WordPress plugin (REVIEWS.IO for WooCommerce)
CVE-2024-37198
Cross-Site Request Forgery CSRF vulnerability in blazethemes Digital Newspaper.This issue affects Digital Newspaper: from n/a through 1.1.5...
CVE-2024-34558
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WOLF allows Stored XSS.This issue affects WOLF: from n/a through 1.0.8.2...
CVE-2023-49847
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Twinpictures Annual Archive allows Stored XSS.This issue affects Annual Archive: from n/a through 1.6.0...
Code injection
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0...
WordPress Raise Mag Theme <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Raise Mag Type Theme Vulnerable versions = 1.0.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28621 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ef6477e9116b Credits László Radnai Required...
FFmpeg 数据伪造问题漏洞
FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg Ffmpeg team. FFmpeg N-98388-g76a3ee996b contains a security vulnerability that could be exploited by an attacker to cause a denial of service DoS via a crafted audio file due to insufficient...
CVE-2018-21091
An issue was discovered on Samsung mobile devices with M6.x and N7.x software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 January 2018...
Input validation
NVIDIA Tegra Gralloc module contains a vulnerability in driver in which it does not validate input parameter of the registerbuffer API, which may lead to arbitrary code execution, denial of service, or escalation of privileges. Android ID: A-62540032 Severity Rating: High Version: N/A...
Storyteller CMS Local File Inclusion
== Title: Storyteller CMS var Local File Include Vuln Version: n/a Link: http://www.esselbach.com/freeware.php?id=2 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == Vuln code: in GetTemplate function , line 113 to 127 function GetTemplate$var if fileexists"templates/$var.tmp.php"...