Stay updated with breaking news from Cross Site Scripting. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Govt issues alert after 'hacktivist' groups threaten to launch attack on 15 August Representational Image. Photo: Collected. Representational Image. Photo...
Tittle:WordPress Plugin WP Brutal AI < 2.06 - Admin+ Stored XSSReferences:CVE-2023-2606Author:Taurus Omar Description:The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Affects Plugins:WP Brutal AI - Fixed
Tittle:WordPress Plugin Login Rebuilder < 2.8.1 - Admin+ Stored XSSReferences:CVE-2023-2223Author:Taurus Omar Description:The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Affects Plugins:Login Rebuilder - Fixed in version
Tittle:WordPress Plugin Tablesome < 1.0.9 - Reflected XSSReferences:CVE-2023-1890Author:Taurus Omar Description:The plugin does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site ScriptingAffects Plugins:Tablesome - Fixed in version 1.0.9Proof of Concept:Make a logged in admin open one of the URL below when the feature/tracking notice has