XSS - CVE CyberSecurity Database News (Page 40)

May 23, 2024 XSS WordPress Exploit PHP

CVE-2024-3920 - Stored Cross-Site Scripting Vulnerability in Flattr WordPress Plugin through 1.2.2

The Flattr WordPress plugin, which is widely used to monetize blogs and websites, has been discovered to have a Stored Cross-Site Scripting (XSS) vulnerability. This

May 23, 2024 XSS WordPress

CVE-2024-3594 - Stored XSS Vulnerability in IDonate WordPress Plugin (<= 1.9.) Explained

--- WordPress plugins are one of the best things about using WordPress, but sometimes they create security issues. CVE-2024-3594 is a new security flaw affecting

May 23, 2024 XSS WordPress PHP

CVE-2024-3917 - How a Simple XSS Bug in Pet Manager WordPress Plugin Lets Attackers Target Admins

If you run a WordPress site and use the popular Pet Manager plugin, there’s a critical security issue you need to know. CVE-2024-3917 exposes

May 23, 2024 XSS WordPress Exploit

CVE-2024-2220: Stored Cross-Site Scripting (XSS) Vulnerability in Button Contact VR WordPress Plugin through 4.7

The Button Contact VR WordPress plugin (versions up to and including 4.7) is found to be vulnerable to Stored Cross-Site Scripting (XSS) attacks. This

May 22, 2024 XSS

CVE-2024-25737 - Exploiting SSRF and XSS in VuFind’s /Cover/Show Route

On February 2024, a critical security issue, CVE-2024-25737, was publicly disclosed. This vulnerability affects the /Cover/Show route in the popular library discovery platform, VuFind.