CVE-2023-47516

Cross-Site Request Forgery CSRF vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from n/a through 2.0...

CVE-2023-47516 WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from n/a through 2.0...

CVE-2023-47516 WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from n/a through 2.0...

CVE-2023-47516

CVE-2023-47516 is a CSRF vulnerability in the WordPress plugin “Category Post List Widget” that allows Stored XSS in versions

PT-2023-30477 · Unknown · Category Posts Widget

Name of the Vulnerable Software and Affected Versions: Category Post List Widget versions n/a through 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the Category Post List Widget. Recommendations: For versions n/a through 2....

WordPress Plugin Category Post List Widget Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2023-47516: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from n/a through 2.0...

WordPress Plugin Live Gold Price & Silver Price Charts Widgets Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress WP Blog and Widget Plugin <= 2.5 is vulnerable to Broken Access Control

Software WP Blog and Widget Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 2eb15fc7bcca Credits Abdi Pranata Required...

WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Category Post List Widget Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47672 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2bbd3cb20546 Credits LEE SE...

WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Category Post List Widget Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47516 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID de7a709c5e66 Credits LEE SE HYOU...

ServiceNow Data Exposure: A Wake-Up Call for Companies

Earlier this week, ServiceNow announced on its support site that misconfigurations within the platform could result in "unintended access" to sensitive data. For organizations that use ServiceNow, this security exposure is a critical concern that could have resulted in major data leakage of...

WordPress Weather Atlas Widget Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Weather Atlas Widget Type Plugin Vulnerable versions = 1.2.1 Fixed in 2.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5163 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 53d44a1617c5 Credits István Márton...

CVE-2023-46854

Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature...

CVE-2023-46854

Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature...

Design/Logic Flaw

Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature...

PT-2023-30243 · Proxmox · Proxmox-Widget-Toolkit

Name of the Vulnerable Software and Affected Versions: Proxmox proxmox-widget-toolkit versions prior to 4.0.9 Description: The issue allows XSS via the edit notes feature. This affects multiple Proxmox products that use the proxmox-widget-toolkit. Recommendations: For versions prior to 4.0.9,...

CVE-2023-46854: Improper Neutralization of Input During Web Page Generation

Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature...

proxmox-widget-toolkit Cross-Site Scripting Vulnerability

proxmox-widget-toolkit is an open source toolkit for proxmox. A cross-site scripting vulnerability exists in Proxmox proxmox-widget-toolkit versions prior to 4.0.9, which stems from allowing cross-site scripting attacks via the Edit Comments feature...

CVE-2023-46854

The CVE-2023-46854 issue affects the Proxmox proxmox-widget-toolkit prior to 4.0.9 used in multiple Proxmox products. It enables Cross‑Site Scripting via the Edit Notes (edIT notes/Comments) feature due to improper input handling, with a practical impact of potential script execution in a user’s ...