CVE-2024-33302

SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...

CVE-2024-33303

The SourceCodester Product Show Room 1.0 (and prior versions) is vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is the improper neutralization of input during web page generation, specifically via the "First Name" parameter located under the Add Users feature. This flaw allows ...

CVE-2024-33303: Improper Neutralization of Input During Web Page Generation

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...

CVE-2023-6731: Improper Authorization

The WP Show Posts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 1.1.5. This makes it possible for authenticated attackers, with subscriber access and above, to view arbitrary pos...

CVE-2024-33302

SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...

CVE-2024-33302: Improper Neutralization of Input During Web Page Generation

SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...

CVE-2024-33302

SourceCodester Product Show Room version 1.0 and before is vulnerable to Cross-Site Scripting (XSS) . The vulnerability is triggered via the Middle Name parameter within the Add Users section, where improper neutralization of input during web page generation allows for potential malicious script ...

PT-2024-25193 · Sourcecodester · Sourcecodester Product Show Room

Name of the Vulnerable Software and Affected Versions: SourceCodester Product Show Room version 1.0 Description: The issue concerns Cross Site Scripting XSS via the First Name field under Add Users. This allows for potential malicious script injection. Recommendations: For SourceCodester Product...

CVE-2024-33304

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

CVE-2024-33304

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

PT-2024-25194 · Sourcecodester · Sourcecodester Product Show Room

Name of the Vulnerable Software and Affected Versions: SourceCodester Product Show Room version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Last Name field under Add Users. This allows for potential malicious script injection. No information is provided about the...

CVE-2024-33304

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

Product Show Room 跨站脚本漏洞

Product Show Room Site is a product show room website by Carlo Montero's personal developer. A cross-site scripting vulnerability exists in Product Show Room 1.0 and earlier versions, which is caused by an easy cross-site scripting attack via the Last Name parameter under Add User...

CVE-2024-33304: Improper Neutralization of Input During Web Page Generation

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

CVE-2024-33304

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

SUSE CVE-2024-26928

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsdebugfilesprocshow Skip sessions that are being teared down status == SESEXITING to avoid UAF...

SUSE CVE-2024-27306

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server e.g. nginx for serving static files. Users following th...

AZL-43357 CVE-2024-27306 affecting package python-aiohttp 3.6.2-3

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server e.g. nginx for serving static files. Users following th...

DEBIAN-CVE-2024-27306

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server e.g. nginx for serving static files. Users following th...

GHSA-7GPW-8WMC-PM8G aiohttp Cross-site Scripting vulnerability on index pages for static file handling

Summary A XSS vulnerability exists on index pages for static file handling. Details When using web.static..., showindex=True, the resulting index pages do not escape file names. If users can upload files with arbitrary filenames to the static directory, the server is vulnerable to XSS attacks...