PT-2024-38939 · WordPress · Xo Slider

Name of the Vulnerable Software and Affected Versions: XO Slider plugin for WordPress versions up to, and including, 3.8.6 Description: The issue is related to Stored Cross-Site Scripting via the get slider function due to insufficient input sanitization and output escaping. This allows...

WordPress XO Slider Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS)

Software XO Slider Type Plugin Vulnerable versions = 3.8.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8324 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 959a1f9fef5b Credits Francesco Carlucci Required...

WordPress plugin XO Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

MAL-2024-1167 Malicious code in xo-page-test-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11d1c570ca1f162deccd278919172fec0695d65f640b2365daebdc2dfa0d998d The OpenSSF Package Analysis project identified 'xo-page-test-components' @ 99.2.9 npm as malicious. It is considered malicious because: - The...

Malicious code in xo-page-test-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11d1c570ca1f162deccd278919172fec0695d65f640b2365daebdc2dfa0d998d The OpenSSF Package Analysis project identified 'xo-page-test-components' @ 99.2.9 npm as malicious. It is considered malicious because: - The...

Malicious code in xo-page-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1033 Malicious code in xo-page-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for golang-github-xo-terminfo (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-xo-terminfo-0-0.7.20210113gitc22d04b.fc36

A terminfo package in pure go!...

Fedora: Security Advisory for golang-github-xo-terminfo (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-xo-terminfo-0-0.6.20210113gitc22d04b.fc35

A terminfo package in pure go!...

Fedora: Security Advisory for golang-github-xo-terminfo (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Malicious Package

Overview xo-guest-components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Malicious Package

Overview xo-locale is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in xo-shim-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54e218545ce301c0d9363cf4a06c32ddf8e75737a2bd1b629a645d6cc00e9777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-hermes-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436b2d277ba73416e1273b318bbb98fba6903b23dfb5ac703793e9ae90bb920a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7287 Malicious code in xo-hermes-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436b2d277ba73416e1273b318bbb98fba6903b23dfb5ac703793e9ae90bb920a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7289 Malicious code in xo-shim-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54e218545ce301c0d9363cf4a06c32ddf8e75737a2bd1b629a645d6cc00e9777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7290 Malicious code in xo-webpack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1bc407dbdcf3cf84876763050ac6c8ef085bfb994cf9439a6ba96c12c7ab0c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-webpack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1bc407dbdcf3cf84876763050ac6c8ef085bfb994cf9439a6ba96c12c7ab0c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...