PT-2021-10636

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /admin.php/Link/addsave component. Cross-site scripting XSS is a type of security...

PT-2021-10637

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /admin.php?m=Config&a=add component. Cross-site scripting XSS is a type of security...

PT-2021-10635

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /admin.php?&m=Public&a=login component. Cross-site scripting XSS is a type of security...

CVE-2020-21505: Improper Neutralization of Input During Web Page Generation

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php/Link/addsave...

CVE-2020-21506: Improper Neutralization of Input During Web Page Generation

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?m=Config&a=add...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges...

CVE-2020-21386

CVE-2020-21386 is a CSRF vulnerability in Maccms 10 affecting the component admin.php/admin/type/info.html. The issue arises from its admin flow failing to verify that requests originate from trusted users, enabling an attacker to gain administrator privileges. The connected documents consistentl...

CVE-2020-21386: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges...

PT-2021-10620

Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A Cross-Site Request Forgery CSRF issue in the component "admin.php/admin/type/info.html" allows attackers to gain administrator privileges. Recommendations: For Maccms version 10, consider disabling access to t...

PT-2021-10504

Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A Cross-Site Request Forgery CSRF issue allows authenticated attackers to delete all users via the API endpoint "admin.php/admin/admin/del/ids/.html". Recommendations: For Maccms version 10, as a temporary...

CVE-2020-20514: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/ .html allows authenticated attackers to delete all users...

CVE-2021-34650

The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6...

Cross site scripting

The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6...

CVE-2021-34650 eID Easy <= 4.6 Reflected Cross-Site Scripting

The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6...

CVE-2021-34650

The CVE-2021-34650 entry corresponds to a Reflected Cross-Site Scripting vulnerability in the WordPress plugin eID Easy (versions up to 4.6). The issue arises from the error parameter in admin.php, enabling arbitrary script injection. Public sources consistently identify this as a vulnerability i...

PT-2021-20618

Name of the Vulnerable Software and Affected Versions: eID Easy WordPress plugin versions up to and including 4.6 Description: The issue allows attackers to inject arbitrary web scripts via the error parameter found in the /admin.php file, enabling Reflected Cross-Site Scripting attacks...

CVE-2021-34650: Improper Neutralization of Input During Web Page Generation

The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6...

eID Easy < 4.7 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the /admin.php file which allows attackers to inject arbitrary web scripts...

CVE-2021-38359

The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...

CVE-2021-38349

The Integration of Moneybird for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the errordescription parameter found in the /templates/wcmb-admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.1...