10919 matches found
CVE-2024-5265 WPBakery Page Builder <= 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute
The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link attribute within the vcsingleimage shortcode in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2024-5265
CVE-2024-5265 is a Stored Cross-Site Scripting vulnerability in the WPBakery Visual Composer (WordPress) plugin, affecting versions up to 7.6. The issue arises from insufficient input sanitization and output escaping of attributes used by the vc_single_image shortcode, allowing authenticated user...
Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin < 1.0.22 - Missing Authorization to Limited Privilege Escalation
Description The Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the makestaff function in all versions up to, and including, 1.0.21. This...
PT-2024-35405
Name of the Vulnerable Software and Affected Versions WPBakery Visual Composer plugin for WordPress versions up to, and including, 7.6 Description The issue is related to Stored Cross-Site Scripting via the link attribute within the vc single image shortcode due to insufficient input sanitization...
WordPress plugin WPBakery Visual Composer security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-5265: Improper Neutralization of Input During Web Page Generation
The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link attribute within the vcsingleimage shortcode in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
Vulnerabilities fixed in Microsoft Visual Studio
Microsoft has fixed vulnerabilities in Visual Studio. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges, potentially executing arbitrary code with the victim's privileges. For successful exploitation, the malicious party must trick the victim into...
CVE-2024-29060
Visual Studio Elevation of Privilege Vulnerability...
CVE-2024-29060
Visual Studio Elevation of Privilege Vulnerability...
CVE-2024-29060
Visual Studio Elevation of Privilege Vulnerability...
CVE-2024-30052
Visual Studio Remote Code Execution Vulnerability...
CVE-2024-30052
Visual Studio Remote Code Execution Vulnerability...
CVE-2024-30052
Visual Studio Remote Code Execution Vulnerability...
CVE-2024-30052
CVE-2024-30052 affects Microsoft Visual Studio and is described as a remote code execution vulnerability with a CVSS v3.1 base score of 4.7 (Medium). The metrics indicate LOCAL exploitation, user interaction required, HIGH integrity impact, and no confidentiality impact. Connected sources corrobo...
CVE-2024-30052 Visual Studio Remote Code Execution Vulnerability
...
CVE-2024-30052 Visual Studio Remote Code Execution Vulnerability
...
CVE-2024-29060
CVE-2024-29060 is an elevation of privilege vulnerability in Microsoft Visual Studio family. The CVE affects multiple VS versions (e.g., Visual Studio 2017–2022 lineups) with a root cause described across sources as an elevation of privileges vulnerability that can be exploited to gain higher pri...
CVE-2024-29060 Visual Studio Elevation of Privilege Vulnerability
...
