EUVD-2024-32880

Malicious code in bioql PyPI...

CVE-2024-10038

The WP-Strava plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2024-10038

CVE-2024-10038 — WP-Strava (WordPress) is an authenticated stored XSS vulnerability in the WP-Strava plugin up to version 2.12.1. The root cause is “insufficient input sanitization and output escaping” in admin settings, allowing an attacker with administrator-level permissions to inject scripts ...

WordPress WP-Strava Plugin <= 2.12.1 is vulnerable to Cross Site Scripting (XSS)

Software WP-Strava Type Plugin Vulnerable versions = 2.12.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10038 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID dd6efa54c071 Credits paupu Required privilege...