Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 Reflected XSS when uploading an image in the product page
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 Reflected XSS when uploading an image in the product page


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: portal.patchman.co

If a target sends a corrupted file, it leads to a reflected XSS.

This vulnerability affects the following application versions:

  • PrestaShop 1.7.0.0
  • PrestaShop 1.7.0.0 beta1
  • PrestaShop 1.7.0.0 beta2
  • PrestaShop 1.7.0.0 beta3
  • PrestaShop 1.7.0.0 RC0
  • PrestaShop 1.7.0.0 RC1
  • PrestaShop 1.7.0.0 RC2
  • PrestaShop 1.7.0.0 RC3
  • PrestaShop 1.7.0.1
  • PrestaShop 1.7.0.2
  • PrestaShop 1.7.0.3
  • PrestaShop 1.7.0.4
  • PrestaShop 1.7.0.5
  • PrestaShop 1.7.0.6
  • PrestaShop 1.7.1.0
  • PrestaShop 1.7.1.0 beta1
  • PrestaShop 1.7.1.1
  • PrestaShop 1.7.1.2
  • PrestaShop 1.7.2.0
  • PrestaShop 1.7.2.0 RC 1
  • PrestaShop 1.7.2.1
  • PrestaShop 1.7.2.2
  • PrestaShop 1.7.2.3
  • PrestaShop 1.7.2.4
  • PrestaShop 1.7.2.5
  • PrestaShop 1.7.3.0
  • PrestaShop 1.7.3.0 beta 1
  • PrestaShop 1.7.3.0 RC 1
  • PrestaShop 1.7.3.1
  • PrestaShop 1.7.3.2
  • PrestaShop 1.7.3.3
  • PrestaShop 1.7.3.4
  • PrestaShop 1.7.4.0
  • PrestaShop 1.7.4.0 beta 1
  • PrestaShop 1.7.4.1
  • PrestaShop 1.7.4.2
  • PrestaShop 1.7.4.3
  • PrestaShop 1.7.4.4
  • PrestaShop 1.7.5.0
  • PrestaShop 1.7.5.0 beta 1
  • PrestaShop 1.7.5.0 RC 1
  • PrestaShop 1.7.5.1
  • PrestaShop 1.7.5.2
  • PrestaShop 1.7.6.0
  • PrestaShop 1.7.6.0 beta 1
  • PrestaShop 1.7.6.0 RC 1
  • PrestaShop 1.7.6.0 RC 2
  • PrestaShop 1.7.6.1
  • PrestaShop 1.7.6.2
  • PrestaShop 1.7.6.3
  • PrestaShop 1.7.6.4
  • PrestaShop 1.7.6.4 1
  • PrestaShop 1.7.6.5
  • PrestaShop 1.7.6.5 1
...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 Reflected XSS when uploading an image in the product page


📈 60.56 Punkte

📌 CVE-2024-24135 | SourceCodester Product Inventory with Export to Excel 1.0 Add Product Product Name/Product Code cross site scripting


📈 36.16 Punkte

📌 Plone up to 4.3.2 Image Tag Image.py OFS.Image Reflected cross site scriting


📈 31.54 Punkte

📌 XSS-LOADER - XSS Payload Generator / XSS Scanner / XSS Dork Finder


📈 29.8 Punkte

📌 WooCommerce Product Vendors Plugin <= 2.0.27 - Unauthenticated Reflected XSS


📈 26.82 Punkte

📌 360 Product Rotation <= 1.4.7 - Reflected XSS


📈 26.82 Punkte

📌 WooCommerce Product Feed for Google, Facebook, eBay and Many More < 3.1.15 - Authenticated Reflected XSS


📈 26.82 Punkte

📌 Four npm packages found uploading user details on a GitHub page


📈 26.67 Punkte

📌 Mail.ru: xss while uploading a file


📈 26.53 Punkte

📌 Cross-site scripting (XSS) vulnerability when uploading very large files


📈 26.53 Punkte

📌 Visma Bug Bounty Program: Stored XSS when uploading files to an invoice


📈 26.53 Punkte

📌 [Fixed] Http Error Uploading Image to WordPress


📈 26.15 Punkte

📌 [APPSEC-1876] Cross-site scripting (XSS) in Admin Bundle Product Bundle Items Tab through Product SKU


📈 25.53 Punkte

📌 Sanitize product id list in "product-function" to prevent XSS


📈 25.53 Punkte

📌 Elementor Page Builder < 2.8.5 - Authenticated Reflected XSS


📈 25.37 Punkte

📌 Reflected XSS on the network settings page


📈 25.37 Punkte

📌 Topcoder: Reflected XSS on error page on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.action


📈 25.37 Punkte

📌 Reflected XSS on the network settings page


📈 25.37 Punkte

📌 Topcoder: Reflected XSS on https://apps.topcoder.com/wiki/page/


📈 25.37 Punkte

📌 U.S. Dept Of Defense: Reflected XSS on ███████ page


📈 25.37 Punkte

📌 TD Bank: Reflected XSS on Admin Login Page


📈 25.37 Punkte

📌 U.S. Dept Of Defense: Self XSS + CSRF Leads to Reflected XSS in https://████/


📈 25.23 Punkte

📌 U.S. Dept Of Defense: [XSS] Reflected XSS via POST request


📈 25.23 Punkte

📌 On-device product image search: Call the product search backend


📈 25.15 Punkte

📌 [webapps] ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)


📈 24.85 Punkte

📌 Escaping attribute label in single product page to prevent XSS


📈 24.08 Punkte

📌 Was notified that I've created a new FB Business page. Logged into my FB page and the page was there. I didn't make it. I have 2FA, there were no unauthorized logins recorded. What is going on?


📈 22.77 Punkte

📌 CVE-2023-0399 | Image Over Image for WPBakery Page Builder Plugin up to 2.x on WordPress Shortcode Attribute cross site scripting


📈 21.73 Punkte

📌 Free Lossless Image Format 0.3 image/image-pnm.cpp image_load_pnm denial of service


📈 21.21 Punkte

📌 Free Lossless Image Format 0.3 LibPNG image/image-png.cpp memory corruption


📈 21.21 Punkte

📌 MiniMagick up to 4.9.3 lib/mini_magick/image.rb Image.open Image File privilege escalation


📈 21.21 Punkte

📌 Free Lossless Image Format 0.3 LibPNG image/image-png.cpp flif File memory corruption


📈 21.21 Punkte

📌 Free Lossless Image Format 0.3 LibPNG image/image-png.cpp flif File memory corruption


📈 21.21 Punkte

📌 Image Roll - my new simple and fast GTK image viewer with basic image manipulation tools. Written in Rust.


📈 21.21 Punkte

📌 Avoiding lock-in for your image pipeline with Nuxt Image and Netlify Image CDN


📈 21.21 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software