Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zaytech'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2024-8787 6.1 The Smart Online Order for Clover plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.5.7. This makes 2025-02-11 20:14:03
CVE-2024-31238 5.4 Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5. 2025-02-10 19:11:09
CVE-2024-43254 4.3 Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Online Order for Clover: from n/a through 1.5.6. 2025-02-10 18:30:20
CVE-2024-43253 5.3 Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Smart Online Order for Clover: from n/a through 1.5.6. 2025-02-10 18:28:35
CVE-2024-29115 6.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through 1.5.5. 2025-02-07 17:21:05
CVE-2024-9895 5.4 The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortcode in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping on 2024-10-17 20:50:03
CVE-2024-7032 6.5 The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndClean' function in all versions up to, and including, 1.5.6. This makes it possible for unaut 2024-08-31 03:02:41
CVE-2024-7030 4.3 The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.5.6. This makes it possible for authenticated att 2024-08-31 03:00:52
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/1
Zapisa po stranici: