CVE-2024-43213

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17...

CVE-2024-43213

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17...

CVE-2024-43213 WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17...

CVE-2024-43213 WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17...

CVE-2024-43213

CVE-2024-43213 is a Reflected XSS in MultiVendorX WC Marketplace (WC Marketplace) caused by improper input neutralization during web page generation. The vulnerability affects WC Marketplace releases up to 4.1.17, with the WC Marketplace entry marked as patched in public advisories. Affected prod...

WordPress plugin WC Marketplace 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-30376 · Unknown · Multivendorx Wc Marketplace

Name of the Vulnerable Software and Affected Versions: MultiVendorX WC Marketplace versions n/a through 4.1.17 Description: The issue affects the MultiVendorX WC Marketplace, allowing Reflected XSS due to improper neutralization of input during web page generation. This can lead to cross-site...

WordPress WC Marketplace Plugin <= 4.1.17 is vulnerable to Cross Site Scripting (XSS)

Software WC Marketplace Type Plugin Vulnerable versions = 4.1.17 Fixed in 4.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43213 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9e24c9d497f1 Credits LVT-tholv2k Required privilege...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer CVE-2022-48627 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow timeout for anonymous sets CVE-2023-526...

CVE-2024-38772

CVE-2024-38772 is a Path Traversal vulnerability in Crocoblock JetWidgets for Elementor and WooCommerce. Affected: JetWidgets for Elementor and WooCommerce versions up to 1.1.7. Root cause: improper limitation of a pathname to a restricted directory, enabling PHP local file inclusion. Impact: pot...

@appium/universal-xml-plugin (>=1.0.18 <=1.0.20), @cardscan.ai/cardscan-client (>=0.1.0 <=0.4.3) +105 more potentially affected by CVE-2024-41818 via fast-xml-parser (>=4.3.5 <=4.4.0)

fast-xml-parser NPM version =4.3.5, =1.0.18, =0.1.0, =1.1.0, =8.0.167, =11.49.0, =13.4.12, =11.49.0, =28.16.23, =11.49.0, =0.0.145, =1.0.0, =10.3.11, =0.1.11, =8.0.167, =5.0.167, =5.0.200 and more Source cves: CVE-2024-41818 Source advisory: OSV:GHSA-MPG4-RC92-VX8V...

CVE-2024-37217

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ProWCPlugins Empty Cart Button for WooCommerce allows Stored XSS.This issue affects Empty Cart Button for WooCommerce: from n/a through 1.3.8...

Malicious code in guilib-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 775d9ec7f3cfd0ff4f74cb2824da1d8a04578522705666f6fe09fbb28b545aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7430 Malicious code in guilib-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 775d9ec7f3cfd0ff4f74cb2824da1d8a04578522705666f6fe09fbb28b545aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24703

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25...

CVE-2024-24703 WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25...

CVE-2024-24703 WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25...

WordPress plugin WC Marketplace security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-31304

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3...

CVE-2024-31304

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3...