Myungju Kim

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS in the Webstix Admin Dashboard RSS Feed.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. This allows Command Injection in Dextaz Ping.

The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Z-Downloads component.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into a website, potentially affecting users who access the compromised page.

The issue affects the Auto Poster, allowing for the unrestricted upload of files with dangerous types.

The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have access to it.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the page.

The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have access to it.

The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the WordPress Job Board and Recruitment Plugin – JobWP. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting.

The issue is related to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability in the PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, and Quick View button for the WooCommerce plugin.

The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability that affects users with admin+ authentication. This vulnerability can be exploited through specific endpoints related to order management, such as canceling, returning, or reordering.

A Stored Cross-Site Scripting (XSS) vulnerability exists, allowing authenticated administrators to inject malicious scripts. This issue affects the PI Websolution Order date, Order pickup, Order date time, Pickup Location, and delivery date components.

The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions on behalf of the user.

The issue is related to a Stored Cross-site Scripting (XSS) vulnerability that requires authentication with admin+ privileges. This vulnerability affects the WooCommerce product catalog plugin.

The issue is related to an Authenticated Stored Cross-site Scripting (XSS) vulnerability. This means that an attacker with admin privileges can inject malicious code into the application, which will be executed by the browser of other users. The vulnerability is located in the shipping calculator functionality of the plugin.