Security
Headlines
HeadlinesLatestCVEs

Tag

#xss

CVE-2023-28792: WordPress Continuous Image Carousel With Lightbox plugin <= 1.0.15 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions.

CVE
#xss#vulnerability#web#wordpress#auth
CVE-2023-27620: WordPress Robo Gallery plugin <= 3.2.12 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (contributor+) Stored Cross-site Scripting (XSS) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.12 versions.

CVE-2023-25442: WordPress Zeno Font Resizer plugin <= 1.7.9 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Marcel Pol Zeno Font Resizer plugin <= 1.7.9 versions.

CVE-2023-23799: WordPress Easy Panorama plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Leonardo Giacone Easy Panorama plugin <= 1.1.4 versions.

CVE-2022-43914: AdvisoryID: 67449 CVE-2022-43914 Vulnerability Report

IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036.

CVE-2023-29094: WordPress Product page shipping calculator for WooCommerce plugin <= 1.3.20 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.20 versions.

CVE-2023-25712: WordPress Opt-Out for Google Analytics plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-Buddy Google Analytics Opt-Out plugin <= 2.3.4 versions.

CVE-2023-25711: WordPress WPGlobus Translate Options plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPGlobus WPGlobus Translate Options plugin <= 2.1.0 versions.

CVE-2023-25702: WordPress Quick Paypal Payments plugin <= 5.7.25 - Cross Site Scripting (XSS) - Patchstack

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.