CWE-1022 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1022/ Sun, 26 Feb 2023 06:41:42 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-1022 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1022/ 32 32 CVE-2020-36624 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-36624/ Sun, 26 Feb 2023 06:41:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-36624/ A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/text_helpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The attack can be initiated remotely. Upgrading to version 1.1.0 is able […]

The post CVE-2020-36624 appeared first on CVE Vulnerability.

]]> A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/text_helpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The attack can be initiated remotely. Upgrading to version 1.1.0 is able to address this issue. The name of the patch is 184b60ded0e43c985788582aca2d1e746f9405a3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216520.

The post CVE-2020-36624 appeared first on CVE Vulnerability.

]]> CVE-2022-1583 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-1583/ Thu, 23 Feb 2023 05:02:08 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-1583/ The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to “null” when links to external sites are clicked, which may enable tabnabbing attacks to occur.

The post CVE-2022-1583 appeared first on CVE Vulnerability.

]]> The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to “null” when links to external sites are clicked, which may enable tabnabbing attacks to occur.

The post CVE-2022-1583 appeared first on CVE Vulnerability.

]]>