GCVE - cpe:2.3:a:osiris8:osiris_signature

Approved changes feed: RSS · Atom

cpe:2.3:a:osiris8:osiris_signature_banner:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Osiris8 (`67a5c964-4507-5c67-a0ae-794c2e85e4c6`)
Product	Osiris Signature Banner (`91be28e5-eae3-593d-9093-343983c587d0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-8905`	vulnerable	2026-07-29 01:09:06.451526	Osiris Signature Banner <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'prepend_text' Parameter MEDIUM (6.1) The Osiris Signature Banner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2026-06-24T05:33:21.111Z Updated: 2026-06-24T14:48:31.622Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/03226722-000c-4bfe-a09b-e75882274845?source=cve https://plugins.trac.wordpress.org/browser/osiris-signature-banner/tags/0.5/osiris-signature-banner.php#L118 https://plugins.trac.wordpress.org/browser/osiris-signature-banner/tags/0.5/osiris-signature-banner.php#L189 https://plugins.trac.wordpress.org/browser/osiris-signature-banner/tags/0.5/osiris-signature-banner.php#L107 https://plugins.trac.wordpress.org/browser/osiris-signature-banner/tags/0.5/osiris-signature-banner.php#L139	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.