WordPress Core <6.5.2 - Cross-Site Scripting

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. id: CVE-2024-4439 info: name: WordPress Core 6.5.2 - Cross-Site Scripting author: nqdung2002 severity: hi...

Docmost 0.2.1-0.21.0 - Arbitrary File Read

Docmost v0.21.0 contains a path traversal caused by improper handling of avatar attachments, letting unauthenticated attackers disclose local files via a POST request on a public URL. id: CVE-2025-57231 info: name: Docmost 0.2.1-0.21.0 - Arbitrary File Read author: anirbala98 severity: high...

Label Studio - Cross-Site Scripting

Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. id: CVE-2023-47115 info: name: Label Studio - Cross-Site Scripting author: isaca...

CVE-2026-108652

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the SystemApiController updateAvatar handler. This security weakness allows any authenticated user to modify the avatars of other users, including administrators. A low-privileged attacker can exploit this by sendi...

CVE-2026-108594

Mealie versions 3.26.0 through 3.28.0 are vulnerable to a server-side request forgery (SSRF) vulnerability in the OpenID Connect (OIDC) avatar fetch mechanism. The root cause is that the system ignores ports when allowlisting the identity provider hostname. Consequently, authenticated OIDC users ...

EUVD-2026-96400

Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports...

CVE-2026-102261

CVE-2026-102261 يحتوي هذا المشروع على أداة تحقق غير مدمّرة لتأكيد ما إذا كانت نسخة مصرّح بها من Camaleon CMS تطبّق التفويض المُقدَّم في الإصدار 2.9.3. النطاق تؤثر المشكلة على POST /admin/media/crop في Camaleon CMS حتى الإصدار 2.9.2. كان بإمكان مستخدم يمتلك :manage, :media ولكن بدون :manage, :user...

CVE-2024-4439

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 نطالب بإعادة جميع المواطنين الذين احتجزتهم الجماعة الإرهابية حماس كرهائن، سالمين إلى ديارهم. لن نرتاح حتى يُفرج عن كل رهينة ويعود إلى منزله بأمان. يمكنك المساعدة في إعادتهم إلى ديارهم.https://stories.bringthemhomenow.net/ استغلال CVE-2024-4439: ثغرة البرمجة...

CVE-2019-11447

CVE-2019-11447 - PoC يستغل CuteNews 2.1.2 عبر فحوصات رفع الملفات الضعيفة المستخدمة عند رفع صورة الصورة الرمزية avatar مما يؤدي إلى تنفيذ التعليمات البرمجية عن بُعد RCE. التثبيت استنساخ المستودع وتثبيت المتطلبات. pip install -r requirements.txt الاستخدام لرفع صورة رمزية ستحتاج إلى حساب مستخدم في...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept CRFSlick द्वारा POC, AkkuS द्वारा खोजा गया CutePHP CuteNews 2.1.2 में एक समस्या पाई गई। एक हमलावर प्रोफ़ाइल क्षेत्र में अवतार अपलोड प्रक्रिया के माध्यम से, avatarfile फ़ील्ड के ज़रिए index.php?mod=main&opt=personal पर सर्वर में घुसपैठ कर सक...

Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification

Summary The 50-megapixel decode guard exists only on the task-attachment preview path. Avatar and project-background uploads decode uploaded images with no pixel cap. Worse, the avatar resize fixes the output height at 1024 and derives the width from the aspect ratio, so a tiny extreme-aspect-rat...

GHSA-4VH2-39RQ-RQ8J Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification

Summary The 50-megapixel decode guard exists only on the task-attachment preview path. Avatar and project-background uploads decode uploaded images with no pixel cap. Worse, the avatar resize fixes the output height at 1024 and derives the width from the aspect ratio, so a tiny extreme-aspect-rat...

CVE-2019-11447-EXP

CVE-2019-11447-EXP CuteNews Avatar 2.1.2 रिमोट कोड निष्पादन भेद्यता पायथन स्क्रिप्ट चलाने से पहले, पहले nc कमांड चलाएँ। डिफ़ॉल्ट पोर्ट 1234 है। फिर exploit.py निष्पादित करें, सुझावों का पालन करें और आवश्यक सामग्री इनपुट करें।...

CVE-2026-96518

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

CVE-2026-96337

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

CVE-2026-96518

The ProfilePress WordPress plugin (versions

CVE-2026-96518 WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

EUVD-2026-95593

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

EUVD-2026-95594

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

CVE-2026-96337 WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...