EUVD-2022-49932

Malicious code in bioql PyPI...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

WordPress plugin Booking Calendar Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

PT-2024-12042 · Codepeople · Codepeople Booking Calendar Contact Form

Name of the Vulnerable Software and Affected Versions: CodePeople Booking Calendar Contact Form versions 1.2.34 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: F...

CVE-2024-6862 Cross-Site Request Forgery (CSRF) in lunary-ai/lunary

A Cross-Site Request Forgery CSRF vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive CORS settings. This vulnerability allows an attacker to sign up for and create projects or use the instance as if they were a user with local access. The main attack vector is for...

CVE-2024-6862

CVE-2024-6862 concerns lunary-ai/lunary version 1.2.34 with CSRF arising from overly permissive CORS settings. The backend allegedly permits all origins, exposing unauthenticated endpoints and enabling CSRF attacks that can let an attacker sign up for and create projects or operate as a user on l...

Design/Logic Flaw

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

PT-2024-19540 · Kanboard +1 · Kanboard +1

Name of the Vulnerable Software and Affected Versions: Kanboard version 1.2.34 Description: The issue concerns Html Injection in the group management feature. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incident...

CVE-2024-22720

Summary: CVE-2024-22720 affects Kanboard 1.2.34 and is described as an Html Injection vulnerability in the group management feature. The issue is confirmed in multiple feeds, with no explicit exploit details provided in the documents. CVSS metrics in the primary entry indicate a Medium impact wit...

Kanboard Security Breach

Kanboard is a suite of open source visual task board software. The software has the ability to customize the panels according to the business. A security vulnerability exists in Kanboard version 1.2.34 that stems from vulnerability to HTML injection attacks...

CVE-2022-47157

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Don Benjamin WP Custom Fields Search plugin = 1.2.34 versions...

CVE-2022-47157: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Don Benjamin WP Custom Fields Search plugin = 1.2.34 versions...

[SECURITY] Fedora 37 Update: xmlsec1-1.2.34-4.fc37

XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards "XML Digital Signature" and "XML Encryption"...