A vulnerability has been found in JNews Theme up to 8.0.5 on WordPress (WordPress Plugin) and classified as problematic. Affected by this vulnerability is some unknown processing of the file /?ajax-request=jnews of the component POST Request Handler. Upgrading to version 8.0.6 eliminates this vulnerability.
JNews Theme up to 8.0.5 on WordPress POST Request /?ajax-request=jnews cat_id cross site scripting
- Virtual Patching
- June 11, 2021
- 5:04 am
Contact us to get started
CVE-2023-0556 : CONTENTSTUDIO PLUGIN UP TO 1.2.5 ON WORDPRESS CSTU_GET_METADATA AUTHORIZATION
Description The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions
CVE-2022-48108 : D-LINK DIR-878 1.30B08 SUBNETMASK COMMAND INJECTION
Description D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to
CVE-2022-47767 : SOLAR-LOG GATEWAY UP TO 4.2.7/5.1.1 SLCORE BACKDOOR
Description A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker.