CVE-2023-25052

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

EUVD-2023-29031

Malicious code in bioql PyPI...

CVE-2023-25052

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

CVE-2023-25052 WordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

CVE-2023-25052

CVE-2023-25052 affects WordPress Yandex.News Feed by Teplitsa plugin versions 1.12.5 and earlier. The Red Hat advisory and Patchstack entry confirm an authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability, with impact limited to confidentiality/integrity and no listing of exploit...

PT-2023-19899 · Teplitsa · Teplitsa Yandex.News Feed

Name of the Vulnerable Software and Affected Versions: Teplitsa Yandex.News Feed by Teplitsa plugin versions 1.12.5 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions...

WordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS)

Software Yandex.News Feed by Teplitsa Type Plugin Vulnerable versions = 1.12.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25052 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e627f72e3987 Credits yuyudhn...