all InfoSec News logo
all InfoSec News - Your InfoSec news aggregator
Log in Sign up
all InfoSec News

Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cro...

Add to bookmarks
July 2, 2024, 3:04 p.m. |

CVE | THREATINT - NEW cve.threatint.com

The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textarea.description’ parameter in all versions up to, and including, 3.2.12 due to insufficie...

administrator builder calculator cost cro cross-site parameter plugin scripting vulnerable wordpress

Visit resource

More from cve.threatint.com / CVE | THREATINT - NEW

WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scrip... 18 minutes ago | cve.threatint.com
cross site scripting issue plugin reflected xss +4
WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulne... 27 minutes ago | cve.threatint.com
cross site scripting issue reflected xss scripting +4
Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYS... 35 minutes ago | cve.threatint.com
automated environment feature local +5
WordPress Newspack Ads plugin <= 1.47.1 - Cross Site Scripting (XSS) vulnerab... an hour ago | cve.threatint.com
ads automattic cross site scripting issue +6
WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vu... an hour ago | cve.threatint.com
automattic campaigns cross site scripting issue +6
The built-in SSH server of Gogs through 0.13.0 allows argument injection in i... 3 hours ago | cve.threatint.com
argument attackers can code +9
Gogs through 0.13.0 allows deletion of internal files. 3 hours ago | cve.threatint.com
deletion files internal
Gogs through 0.13.0 allows argument injection during the previewing of changes. 3 hours ago | cve.threatint.com
argument injection
Gogs through 0.13.0 allows argument injection during the tagging of a new rel... 3 hours ago | cve.threatint.com
argument injection new release release +1

Jobs in InfoSec / Cybersecurity

Find Talent

Software Engineer

@ Booz Allen Hamilton | USA, VA, McLean (8283 Greensboro Dr, Hamilton)
View on infosec-jobs.com

SOC Level 1 Engineer

@ Groupon | Remote - India
View on infosec-jobs.com

Senior Technology Auditor (Continuous Process Monitoring)

@ CNA Insurance | US- IL40- Chicago-151N Frankln
View on infosec-jobs.com

Sr. Director, Tech Process Management (ES Risk)

@ Capital One | McLean, VA
View on infosec-jobs.com

AVP, Pre-Sales and Professional Services for Group Benefits & Affinity

@ Manulife | CAN, Ontario, Toronto, 250 Bloor Street East
View on infosec-jobs.com

Software Engineer III

@ Walmart | IN KA BANGALORE Home Office PW II
View on infosec-jobs.com