PT-2022-18448

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Online Book Store System affected versions not specified Description A problem was found in the system, affecting an unknown function of the file /admin/edit.php. The manipulation of the eid argument leads to cross-site...

CVE-2022-2748: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The...

PT-2022-13918

Name of the Vulnerable Software and Affected Versions GetSimple CMS affected versions not specified Description A problematic issue has been found in GetSimple CMS, affecting the file /admin/edit.php of the Content Module. The manipulation of the post-content argument with an input like alert1...

CVE-2022-1503: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like leads to cross site scripting. The attack may be launched remotely but...

PT-2021-16076

Name of the Vulnerable Software and Affected Versions Email Subscriber WordPress plugin versions 1.1 and earlier Description The kento email subscriber ajax AJAX action does not properly sanitise, validate, and escape the submitted subscribe email and subscribe name POST parameters. These...

CVE-2020-20389

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

CVE-2020-20389

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

CVE-2020-20389

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

CVE-2020-20389

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

PT-2021-10486

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: A Cross Site Scripting XSS issue exists in the admin/edit.php file. Recommendations: For GetSimpleCMS version 3.4.0a, update to a newer version that contains a fix for this issue...

CVE-2020-20389: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php...

CVE-2020-13157: Cross-Site Request Forgery (CSRF)

modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI. The old password is not needed...

CVE-2020-13487: Improper Neutralization of Input During Web Page Generation

The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?posttype=forum aka the Forum listing page for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI...

PT-2020-13570

Name of the Vulnerable Software and Affected Versions bbPress plugin versions through 2.6.4 Description The issue concerns stored XSS in the Forum creation section of the bbPress plugin, allowing JavaScript execution at the "wp-admin/edit.php?post type=forum" API endpoint, which is the Forum...

PT-2020-6773

Name of the Vulnerable Software and Affected Versions Online Book Store version 1.0 Description The issue is related to a SQL Injection vulnerability in the admin edit.php script, specifically via the bookisbn parameter. This could allow a remote malicious user to execute arbitrary code. The...

CVE-2015-9425

The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=opanda-item&page=license-manager-sociallocker-next licensekey parameter...

PT-2019-7384

Name of the Vulnerable Software and Affected Versions Social-locker plugin versions prior to 4.2.5 for WordPress Description The issue concerns a CSRF with resultant XSS in the social-locker plugin for WordPress. This occurs via the licensekey parameter in the "/wp-admin/edit.php?post...

PT-2019-7393

Name of the Vulnerable Software and Affected Versions kiwi-logo-carousel plugin versions prior to 1.7.2 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploitable via the "wp-admin/edit.php" endpoint, specifically through the post type, page, tab, or tab flags ord...

CVE-2015-9434: Cross-Site Request Forgery (CSRF)

The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...

PT-2019-7347

Name of the Vulnerable Software and Affected Versions mtouch-quiz plugin versions prior to 3.1.3 for WordPress Description The issue concerns a CSRF Cross-Site Request Forgery vulnerability in the wp-admin/edit.php endpoint, which can lead to XSS Cross-Site Scripting. This allows an attacker to...