6937 matches found
CVE-2025-0897 Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode
The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all versions up to, and including, 6.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2025-0897 Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode
The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all versions up to, and including, 6.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
WordPress plugin Modal Window 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-7475 · WordPress · Modal Window
Name of the Vulnerable Software and Affected Versions: The Modal Window plugin for WordPress versions up to, and including, 6.1.5 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode due to insufficient input sanitization and output escaping on...
CVE-2025-0897: Improper Neutralization of Input During Web Page Generation
The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all versions up to, and including, 6.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
WordPress Modal Window plugin <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via iframeBox Shortcode vulnerability discovered by Bassem Essam in WordPress Plugin Modal Window versions = 6.1.5...
CVE-2025-25300 smartbanner.js rel noopener XSS vulnerability
smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...
CVE-2025-25300
CVE-2025-25300 concerns smartbanner.js (pre-1.14.1) where clicking the View link could expose window.opener to a 3rd party page, enabling possible redirection or script manipulation on the original page. The issue is addressed in version 1.14.1 by automatically applying rel="noopener" to links. I...
USN-7261-1 vim vulnerability
It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of service...
firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak...
CVE-2024-55272
An issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via the chat window function...
CVE-2024-55272
A security vulnerability exists in Brainasoft Braina v2.8 , an intelligent personal assistant for Windows PCs. A remote attacker can exploit an issue in the chat window function to obtain sensitive information . This vulnerability is associated with CWE-200 (Exposure of Sensitive Information to a...
PT-2025-6003
Name of the Vulnerable Software and Affected Versions Brainasoft Braina version 2.8 Description The issue allows a remote attacker to obtain sensitive information via the chat window function. Recommendations For Brainasoft Braina version 2.8, consider disabling the chat window function as a...
CVE-2024-55272
An issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via the chat window function...
CVE-2024-55272
An issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via the chat window function...
Braina 安全漏洞
Braina is an intelligent personal assistant software for Windows PCs from Braina that allows you to interact with your computer using voice commands. A security vulnerability exists in Braina version v2.8, which originates from a remote attacker obtaining sensitive information through the chat...
CVE-2024-55272: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via the chat window function...
The vulnerability of the Login Window component in operating systems running on macOS allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Login Window component in operating systems running macOS is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...
Brave Desktop 1.75.175 Security Fixes
Fixed issue where audio was not being farbled in certain cases as reported on HackerOne by cesiumfusilli. - Disabled block element picker in Private Windows as reported on HackerOne by newfunction. Upgraded Chromium to 133.0.6943.54 — refer to Google Chrome advisories for inherited CVEs...
