62 matches found
CVE-2024-29927 WordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasTheme WishSuite allows Stored XSS.This issue affects WishSuite: from n/a through 1.3.7...
WordPress Plugin WishSuite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-23150
Name of the Vulnerable Software and Affected Versions HasTheme WishSuite versions 1.3.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject malicious scrip...
WordPress WishSuite Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)
Software WishSuite Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29927 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 15961de4374a Credits LVT-tholv2k Required privilege Contributor...
CVE-2023-32962
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin = 1.3.4 versions...
CVE-2023-32962
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin = 1.3.4 versions...
CVE-2023-32962
CVE-2023-32962 affects HasTheme WishSuite – Wishlist for WooCommerce plugin (WordPress). The vulnerability is a Stored Cross-Site Scripting (XSS) that requires admin+ authentication. A fix exists: update to version higher than 1.3.4 (PatchStack lists 1.3.5 as the patched release). Public referenc...
CVE-2023-32962 WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin = 1.3.4 versions...
CVE-2023-32962 WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin = 1.3.4 versions...
WishSuite < 1.3.5 - Admin+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
PT-2023-24103 · WordPress · Hastheme Wishsuite – Wishlist For Woocommerce
Name of the Vulnerable Software and Affected Versions: HasTheme WishSuite – Wishlist for WooCommerce plugin versions = 1.3.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the...
WordPress plugin WishSuite – Wishlist for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2023-23731
Cross-Site Request Forgery CSRF vulnerability in HasTheme WishSuite plugin = 1.3.3 versions...
CVE-2023-23731
Cross-Site Request Forgery CSRF vulnerability in HasTheme WishSuite plugin = 1.3.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in HasTheme WishSuite plugin = 1.3.3 versions...
CVE-2023-23731 WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in HasTheme WishSuite plugin = 1.3.3 versions...
CVE-2023-23731
CVE-2023-23731: CSRF in WishSuite (WordPress plugin) = 1.3.4 to mitigate. PatchSTACK notes low severity with potential impact via plugin_activation, no explicit exploit details provided in connected docs.
CVE-2023-23731 WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in HasTheme WishSuite plugin = 1.3.3 versions...
WordPress Plugin WishSuite – Wishlist for WooCommerce 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WishSuite - Wishlist for...