872 matches found
PT-2024-17239 · WordPress · Legalweb Cloud
Name of the Vulnerable Software and Affected Versions: LegalWeb Cloud plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's legalweb-popup shortcode due to insufficient input sanitization and output escaping on...
WordPress LegalWeb Cloud plugin <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin LegalWeb Cloud versions = 1.1.2...
PT-2024-35251 · Unknown · Flowcraft Ux Design Studio
Name of the Vulnerable Software and Affected Versions: Flowcraft UX Design Studio Advanced Personalization versions from n/a through 1.1.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This problem affects the Advanced Personalization...
WordPress plugin Advanced Personalization 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Advanced Personalization versions = 1.1.2...
CVE-2024-51594
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rafel Sansó Gmap Point List allows Stored XSS.This issue affects Gmap Point List: from n/a through 1.1.2...
PT-2024-34737 · Unknown · Gmap Point List
Name of the Vulnerable Software and Affected Versions: Gmap Point List versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...
WordPress plugin Gmap Point List 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
WordPress AzonBox plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin AzonBox versions = 1.1.2...
PT-2024-10229 · Drupal · Drupal Tooltip
Name of the Vulnerable Software and Affected Versions: Drupal Tooltip versions 0.0.0 through 1.1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting XSS attacks. This can be exploited by a remote attacker to conduct...
Drupal Tooltip module < 1.1.2 - Authenticated Cross Site Scripting (XSS) vulnerability
Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff in WordPress Module Tooltip versions 1.1.2...
WordPress Gmap Point List plugin <= 1.1.2 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Gmap Point List versions = 1.1.2...
CVE-2024-48236
An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the write String method of the ofcms-admin\src\main\java\com\ofsoft\cms\core\uitle\FileUtils.java file...
CVE-2024-48236
An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the write String method of the ofcms-admin\src\main\java\com\ofsoft\cms\core\uitle\FileUtils.java file...
CVE-2024-48235
An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file...
CVE-2024-48235
An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file...
OFSoft OFCMS 安全漏洞
OFSoft OFCMS is a content management system CMS developed in Java language by China Zhongtian Network OFSoft. A security vulnerability exists in OFSoft OFCMS version 1.1.2. An attacker can exploit this vulnerability to execute arbitrary code via the save method of the TemplateController.java file...
CVE-2024-48236
CVE-2024-48236 concerns OFCMS 1.1.2. The issue exists in the admin-side FileUtils.java, specifically the FileOutputStream usage inside the write String method, which enables a remote attacker to execute arbitrary code. The descriptions across sources consistently identify this as a remote-code-ex...
OFSoft OFCMS 安全漏洞
OFSoft OFCMS is a content management system CMS developed in Java language by China Zhongtian Network OFSoft. A security vulnerability exists in OFSoft OFCMS version 1.1.2. An attacker can exploit the vulnerability to execute arbitrary code via the FileOutputStream function...
