Rezultati pretraživanja za 'Od datuma: 14.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-11867 | 6.4 | The Companion Portfolio – Responsive Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'companion-portfolio' shortcode in all versions up to, and including, 2.4.0.1 due to insufficient input sanitizat | 2024-12-14 05:15:08 | 2024-12-14 05:15:08 |
| CVE-2024-11865 | 6.4 | The Tabs Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on tab descriptions. This makes it possible for authenticated attackers, | 2024-12-14 05:15:08 | 2024-12-14 05:15:08 |
| CVE-2024-11855 | 6.4 | The Koalendar – Events & Appointments Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘height’ parameter in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping | 2024-12-14 05:15:07 | 2024-12-14 05:15:07 |
| CVE-2024-11770 | 6.4 | The Post Carousel & Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'post-cs' shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied | 2024-12-14 05:15:07 | 2024-12-14 05:15:07 |
| CVE-2024-11763 | 6.4 | The Plezi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'plezi' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This ma | 2024-12-14 05:15:07 | 2024-12-14 05:15:07 |
| CVE-2024-11759 | 6.4 | The Bukza plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bukza' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This ma | 2024-12-14 05:15:07 | 2024-12-14 05:15:07 |
| CVE-2024-11755 | 6.4 | The IMS Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown post settings in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for aut | 2024-12-14 05:15:07 | 2024-12-14 05:15:07 |
| CVE-2024-11751 | 6.4 | The TCBD Popover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbd-popover-image ' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied | 2024-12-14 05:15:06 | 2024-12-14 05:15:06 |
| CVE-2024-11462 | 6.1 | The Filestack Official plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fstab' and 'filestack_options' parameters in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. Thi | 2024-12-14 05:15:06 | 2024-12-14 05:15:06 |
| CVE-2024-11095 | 6.4 | The Visualmodo Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for | 2024-12-14 05:15:06 | 2024-12-14 05:15:06 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12576
Zapisa po stranici: