15060 matches found
VulnCheck KEV: CVE-2018-16159
The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the templateid parameter in a wp-admin/admin-ajax.php wpgvdoajaxfronttemplate request...
VulnCheck KEV: CVE-2022-46381
Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter e.g., to the badging/badgetemplatev0.php component. This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e...
CSZCMS License Issue Vulnerability
CSZCMS is an open source web application that allows managing all content and settings on a website. An authorization issue vulnerability exists in CSZCMS version 1.3.0, which stems from an unknown function in the file view template in the component File Manager Page, resulting in a permissions...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
Design/Logic Flaw
Usedesk before 1.7.57 allows chat template injection...
Malicious code in npm-base-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8600 Malicious code in npm-base-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-49214
CVE-2023-49214 affects Usedesk prior to version 1.7.57 and enables chat template injection. The vulnerability, described consistently across NVD/Red Hat/CNNVD listings, arises from template injection in chat functionality and scores as critical (CVSS 9.8: Network attack, no privileges required, n...
Usedesk Security Breach
Usedesk is a system for bookkeeping and processing applications from Usedesk, Inc. A security vulnerability exists in Usedesk versions prior to 1.7.57 that stems from the presence of a template injection vulnerability...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
Design/Logic Flaw
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...
CVE-2023-49061
CVE-2023-49061 concerns Firefox for iOS prior to version 120, where the Reader Mode fails to neutralize HTML tags, enabling an attacker to perform HTML template injection and potentially exfiltrate user information. Affected software: Firefox for iOS