Show filters
104 Total Results
Displaying 31-40 of 104
Sort by:
Attacker Value
Unknown
CVE-2024-23726
Disclosure Date: January 21, 2024 (last updated January 30, 2024)
Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and the last six of the BSSID, decrementing the last digit.
0
Attacker Value
Unknown
CVE-2023-47840
Disclosure Date: December 29, 2023 (last updated January 05, 2024)
Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.
0
Attacker Value
Unknown
CVE-2023-47680
Disclosure Date: November 14, 2023 (last updated November 18, 2023)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Qode Interactive Qi Addons For Elementor plugin <= 1.6.3 versions.
0
Attacker Value
Unknown
CVE-2023-5659
Disclosure Date: November 07, 2023 (last updated November 15, 2023)
The Interact: Embed A Quiz On Your Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'interact-quiz' shortcode in all versions up to, and including, 3.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
0
Attacker Value
Unknown
CVE-2023-5082
Disclosure Date: November 06, 2023 (last updated November 15, 2023)
The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when using the Smash Balloon Social Photo Feed plugin alongside it.
0
Attacker Value
Unknown
CVE-2023-40333
Disclosure Date: September 27, 2023 (last updated February 25, 2025)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Qode Interactive Bridge Core plugin <= 3.0.9 versions.
0
Attacker Value
Unknown
CVE-2023-41103
Disclosure Date: September 11, 2023 (last updated February 25, 2025)
Interact 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in several locations, allowing an attacker to store a JavaScript payload.
0
Attacker Value
Unknown
CVE-2023-25439
Disclosure Date: May 25, 2023 (last updated February 25, 2025)
Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details.
0
Attacker Value
Unknown
CVE-2023-23866
Disclosure Date: April 25, 2023 (last updated February 24, 2025)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Carlos Moreira Interactive Geo Maps plugin <= 1.5.8 versions.
0
Attacker Value
Unknown
CVE-2023-23821
Disclosure Date: April 04, 2023 (last updated February 24, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcin Pietrzak Interactive Polish Map plugin <= 1.2 versions.
0
