NA

CVE-2024-1234

Published: 13/03/2024 Updated: 13/03/2024

Vulnerability Summary

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Github Repositories

This script looks up CVE numbers you receive from nessus/qualys output and checks them against the Microsoft API to retrieve information such as if there has been exploitation or public details.

Microsoft-CVE-Lookup This script looks up CVE numbers you receive from nessus/qualys output and checks them against the Microsoft API to retrieve information such as if there has been exploitation or public details Help Retrieve information for a CVE from Microsoft API cve_number CVE number to retrieve information for, example CVE-2024-123

using NIST API

nuclei_template_generater using NIST API Usage python3 nugenpy [CVE-ID] [Author name] ex) python3 nugenpy CVE-2024-1234 West-Wise

Final Project - Ethical Hacking Report Client : Lazada Group Date : May, 11 2024 Prepared By : Buquid, Ed Jim C and Bondoy, Monica G Executive Summary : This report presents the technical findings of the ethical hacking assessment conducted for Lazada The assessment aimed to identify vulnerabilities within the organization's network infrastructure, applications, and sys

Ethical_Final Client : Shien clothing line Date : May 20, 2024 Prepared By : Penaflor,Bernadette and Manalo, Hannah Mie Executive Summary : This report presents the technical findings of the ethical hacking assessment conducted for Shien Clothing line The assessment aimed to identify vulnerabilities within the organization's network infrastructure, applications, and syst

Ethical-Hacking-Technical-Report Ethical Hacking Technical Report Client: Acme Technologies Date: 11/05/2024 Prepared by: Cyrus David B Sandrino and Mike L Rempillo Jr Executive Summary: This report presents the technical findings of the ethical hacking assessment conducted for Acme Technologies The assessment aimed to identify vulnerabilities within the organization's

Final Project - Ethical Hacking Report Client : Lazada Group Date : May, 11 2024 Prepared By : Buquid, Ed Jim C and Bondoy, Monica G Executive Summary : This report presents the technical findings of the ethical hacking assessment conducted for Lazada The assessment aimed to identify vulnerabilities within the organization's network infrastructure, applications, and sys

Ethical Hacking Technical Report Name of Company: Procas T Nation Prepared by: Chino Lawrence A Noble and Boyet P Peñales Date: May 10, 2024 Executive Summary: This report details the findings of an ethical hacking assessment conducted for Procas T Nation The assessment, authorized in writing on 10/05/2024, aimed to identify vulnerabilities within the organization

Ethical Hacking Technical Report Client: Royal Financial Services Date: May 8, 2024 Prepared by: Benedict Alam and Alliah Jane Arevalo Executive Summary: This comprehensive report outlines the findings of the ethical hacking assessment conducted for Royal Financial Services The primary objective of this assessment was to evaluate the security posture of the organization's