224 matches found
CVE-2024-10172 WPBakery Visual Composer WHMCS Elements <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via void_wbwhmcse_laouts_search Shortcode
The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's voidwbwhmcselaoutssearch shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...
WordPress plugin WPBakery Visual Composer WHMCS Elements 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via void_wbwhmcse_laouts_search Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via voidwbwhmcselaoutssearch Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin WPBakery Visual Composer WHMCS Elements versions = 1.0.4...
WordPress WPBakery Visual Composer WHMCS Elements Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)
Software WPBakery Visual Composer WHMCS Elements Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10172 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 30c8a799718e Credits...
PT-2024-16086 · WordPress · Wpbakery Visual Composer Whmcs Elements
Name of the Vulnerable Software and Affected Versions: WPBakery Visual Composer WHMCS Elements plugin for WordPress versions up to, and including, 1.0.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied...
CVE-2024-40579
Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to obtain sensitive information via modification of the hostname parameter...
CVE-2024-40579
Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to obtain sensitive information via modification of the hostname parameter...
CVE-2024-40579
CVE-2024-40579 is a cross-site scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v1.7.1 . The issue is triggered via modification of the hostname parameter , enabling a remote attacker to obtain sensitive information. The CVSS v3.1 metrics indicate a base score 5.4 (MEDIUM)...
Premium Support Tickets For WHMCS 1.2.10 Cross Site Scripting
Exploit Title: Premium Support Tickets For WHMCS Reflected XSS Exploit Author: Sajibe Kanti Vendor: ModulesGarden Vendor Homepage: https://www.modulesgarden.com/products/whmcs/premium-support-tickets Product Name: Premium Support Tickets For WHMCS Product Version: v1.2.10 Tested Version: WHMCS...
CVE-2024-32592 WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VoidCoders, innovs Void Elementor WHMCS Elements For Elementor Page Builder allows Stored XSS.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0...
CVE-2024-32592
CVE-2024-32592 is a Stored XSS in Void Elementor WHMCS Elements For Elementor Page Builder (VoidCoders, innovs) affecting versions from n/a through 2.0. Root cause: Improper neutralization of input during web page generation. CVSS 3.1 base score 6.5 (Network), with Low confidentiality, integrity,...
WordPress Plugin Void Elementor WHMCS Elements For Elementor Page Builder 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...
WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Void Elementor WHMCS Elements For Elementor Page Builder versions = 2.0...
WordPress Void Elementor WHMCS Elements For Elementor Page Builder Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software Void Elementor WHMCS Elements For Elementor Page Builder Type Plugin Vulnerable versions = 2.0 Fixed in 2.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32592 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8da009f2807a Credits...
CVE-2022-42175
Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization...
CVE-2022-42175
Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization...
CVE-2022-42175
Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization...
CVE-2022-42175
The CVE-2022-42175 entry applies to the WHMCS module SolusVM, specifically version 1.4.1.2. The vulnerability is an Insecure Direct Object Reference that lets an attacker change the password and hostname of other customers’ servers without authorization. Impact is described as high across confide...
