534 matches found
PT-2023-10814 · Unknown · Newcomer1989 Tsn-Ranksystem
Name of the Vulnerable Software and Affected Versions: Newcomer1989 TSN-Ranksystem versions up to 1.2.6 Description: A vulnerability has been found in Newcomer1989 TSN-Ranksystem, affecting the getlog function of the file webinterface/bot.php. The manipulation leads to cross-site scripting. The...
TSN-Ranksystem 跨站脚本漏洞
TSN-Ranksystem is an easy to handle rank system for Newcomer1989 individual developers. It is possible to automatically grant rankings server groups to users on TeamSpeak servers for online time or online activity. A cross-site scripting vulnerability exists in Newcomer1989 TSN-Ranksystem version...
CVE-2022-24117
Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6...
CVE-2022-40963 WordPress WP Page Builder plugin <= 1.2.6 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Auth. author+ Stored Cross-Site Scripting XSS vulnerabilities in WP Page Builder plugin = 1.2.6 on WordPress...
PT-2022-25640 · WordPress · Wp Page Builder
Name of the Vulnerable Software and Affected Versions: WP Page Builder plugin version 1.2.6 and earlier Description: The issue concerns Stored Cross-Site Scripting XSS vulnerabilities in the WP Page Builder plugin. These vulnerabilities allow for multiple authentication bypasses. Recommendations:...
WordPress plugin 5 Anker Connect 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2022-20168 · Anker · Anker Connect Plugin
Name of the Vulnerable Software and Affected Versions: 5 Anker Connect plugin versions 1.2.6 and earlier Description: The issue is an authenticated reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scripts into the website, which woul...
CVE-2022-40963
Multiple Auth. author+ Stored Cross-Site Scripting XSS vulnerabilities in WP Page Builder plugin = 1.2.6 on WordPress...
CVE-2022-30545
Auth. Reflected Cross-Site Scripting XSS vulnerability in 5 Anker Connect plugin = 1.2.6 on WordPress...
CVE-2022-37407 WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities in WPChill Gallery PhotoBlocks plugin = 1.2.6 at WordPress...
WordPress plugin Gallery PhotoBlocks 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-36292
Cross-Site Request Forgery CSRF vulnerabilities in WPChill Gallery PhotoBlocks plugin = 1.2.6 at WordPress...
CVE-2022-36282
Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in Roman Pronskiy's Search Exclude plugin = 1.2.6 at WordPress...
CVE-2022-36292 WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities
Cross-Site Request Forgery CSRF vulnerabilities in WPChill Gallery PhotoBlocks plugin = 1.2.6 at WordPress...
CVE-2022-36282 WordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in Roman Pronskiy's Search Exclude plugin = 1.2.6 at WordPress...
WordPress plugin Gallery PhotoBlocks 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
WordPress plugin Search Exclude 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2022-23289 · Roman Pronskiy · Search Exclude
Name of the Vulnerable Software and Affected Versions: Roman Pronskiy's Search Exclude plugin versions 1.2.6 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with editor or higher privileges can inject...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e....