Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-29810 | 10Web PhotoGallery Plugin up to 1.8.21 on WordPress admin-ajax.php thumb_url cross site scripting


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as problematic, was found in 10Web PhotoGallery Plugin up to 1.8.21 on WordPress. Affected is an unknown function of the file admin-ajax.php. The manipulation of the argument thumb_url leads to cross site scripting. This vulnerability is traded as CVE-2024-29810. It is possible to launch the attack remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2022-1394 | Photo Gallery by 10Web Plugin up to 1.6.3 on WordPress Setting cross site scripting


📈 39.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-45070 | 10Web Form Builder Team Form Maker Plugin up to 1.15.18 on WordPress cross site scripting


📈 39.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-45071 | 10Web Form Builder Team Form Maker Plugin up to 1.15.18 on WordPress cross site scripting


📈 39.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6924 | 10Web Photo Gallery Plugin up to 1.8.18 on WordPress Widget cross site scripting (ID 3013021)


📈 39.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-9335 | 10Web Photo Gallery Plugin up to 1.5.45 on WordPress Stored cross site scripting


📈 39.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-2224 | 10Web SEO Plugin up to 1.2.6 on WordPress Setting cross site scripting


📈 39.98 Punkte
🕵️ Sicherheitslücken

🕵️ 10Web Photo Gallery plugin up to 1.5.22 on WordPress Stored cross site scripting


📈 38.87 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-4058 | 10Web Photo Gallery Plugin up to 1.8.2 on WordPress cross-site request forgery


📈 36.81 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6985 | 10Web AI Assistant Plugin up to 1.0.18 on WordPress Plugin Installation authorization (ID 3027004)


📈 35.97 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3300 | 10Web Form Maker Plugin up to 1.15.5 on WordPress sql injection


📈 31.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-0037 | 10Web Map Builder for Google Maps Plugin prior 1.0.73 on WordPress sql injection


📈 31.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-4666 | 10Web Form Maker Plugin up to 1.15.19 on WordPress unrestricted upload


📈 31.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-24911 | Transposh WordPress Translation Plugin up to 1.0.7 on WordPress Admin Dashboard Page tp_translation tk0 cross site scripting


📈 30.55 Punkte
🕵️ Sicherheitslücken

🕵️ Slider by 10Web Plugin up to 1.2.35 on WordPress bulk_action/export_full/save_slider_db sql injection


📈 30.05 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2004-2746 | Pensacola Web Designs Xtremeasp Photogallery 2.0 Login adminlogin.asp sql injection (EDB-23547 / Nessus ID 12020)


📈 29.51 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] Photogallery Project 1.0 - SQL Injection


📈 28.4 Punkte
⚠️ PoC

⚠️ Photogallery Project 1.0 SQL Injection


📈 28.4 Punkte
⚠️ PoC

🕵️ Powered by IvansWeb IWGallery PhotoGallery © 2005/2007 SQL Injection Vulnerability


📈 28.4 Punkte
🕵️ Sicherheitslücken

🕵️ podlove-podcasting-plugin-for-wordpress Plugin up to 2.3.15 on WordPress cross site scripting


📈 27.5 Punkte
🕵️ Sicherheitslücken

🕵️ Form Maker by 10Web <= 1.13.4 - Cross-Site Request Forgery (CSRF) to LFI


📈 26.35 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: WordPress admin-font-editor Plugin CVE-2016-1000126 Cross Site Scripting Vulnerability


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: WordPress admin-font-editor Plugin CVE-2016-1000126 Cross Site Scripting Vulnerability


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1220 | FoxyShop Plugin up to 4.8.1 on WordPress Admin Page cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2173 | Advanced Database Cleaner Plugin up to 3.1.0 on WordPress Admin Dashboard cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-0899 | Header Footer Code Manager Plugin up to 1.1.23 on WordPress Admin Page cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2181 | Advanced Reset Plugin up to 1.5 on WordPress Admin Dashboard href cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2537 | WooCommerce PDF Invoices & Packing Slips Plugin up to 3.0.0 on WordPress Admin Page cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2655 | Classified Listing Pro Plugin up to 2.0.19 on WordPress Admin Page cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3824 | WP Admin UI Customize Plugin up to 1.5.12 on WordPress cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-23994 | Marcel Bootsman Auto Hide Admin Bar Plugin up to 1.6.1 on WordPress cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-25079 | Contact Form Entries Plugin up to 1.2.3 on WordPress Admin Page form_id/status/end_date/order/orderby/search cross site scripting (ID 2629442)


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-36823 | Absolutely Glamorous Custom Admin Plugin up to 6.8 on WordPress Settings cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-25091 | Link Library Plugin up to 7.2.8 on WordPress Admin Page settingscopy cross site scripting


📈 26.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-1088 | WP Plugin Manager Plugin up to 1.1.7 on WordPress Plugin Activation cross-site request forgery


📈 25.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6633 | Site Notes Plugin up to 2.0.0 on WordPress Admin Note cross-site request forgery


📈 25.63 Punkte
🕵️ Sicherheitslücken

matomo
•