1091 matches found
amCharts: Charts and Maps < 1.4.1 - Contributor+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
[SECURITY] Fedora 36 Update: gotags-1.4.1-9.fc36
ctags-compatible tag generator for Go...
CVE-2022-2341
The Simple Page Transition WordPress plugin through 1.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-29923
Cross-site Scripting XSS vulnerability in ThingsForRestaurants Quick Restaurant Reservations WordPress plugin allows Reflected XSS.This issue affects Quick Restaurant Reservations WordPress plugin: from n/a through 1.4.1...
WordPress plugin ThingsForRestaurants Quick Restaurant Reservations 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. The WordPress plugin ThingsForRestaurants...
PT-2022-19908 · WordPress · Quick Restaurant Reservations
Name of the Vulnerable Software and Affected Versions: Quick Restaurant Reservations WordPress plugin versions 1.4.1 and earlier Description: The issue is a Cross-site Scripting XSS vulnerability, specifically a Reflected XSS, in the Quick Restaurant Reservations WordPress plugin. This...
CVE-2022-2123
The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails...
WordPress plugin Opt-in 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. version 1.4.1 of the WordPress Opt-in plugin is vulnerable to cross-site request forgery, which can b...
[SECURITY] Fedora 36 Update: gotags-1.4.1-8.fc36
ctags-compatible tag generator for Go...
CVE-2021-40668
The Android application HTTP File Server Version 1.4.1 by 'slowscript' is affected by a path traversal vulnerability that permits arbitrary directory listing, file read, and file write...
CVE-2021-40668
The CVE-2021-40668 entry concerns the Android application HTTP File Server (Version 1.4.1) by slowscript. Multiple connected sources confirm a path traversal vulnerability that permits arbitrary directory listing, file read, and file write. The NVD entry lists impact including partial confidentia...
HTTP File Server 路径遍历漏洞
HTTP File Server is a simple tool that allows you to access your phone's files from your desktop, tablet or other device without any special software - just a web browser. A security vulnerability exists in HTTP File Server for Android version 1.4.1, which stems from a path traversal issue. An...
VulnCheck KEV: CVE-2018-16763
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...
Mautic Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that 1 delete email campaigns or 2 delete contacts...
CVE-2021-38971
IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620...
WordPress plugin 跨站脚本漏洞
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress Better WordPress Google XML Sitemaps plugin version 1.4.1 and earlier versions are vulnerable to a cross-site scripting...
GHSA-GCX5-3P5F-F8VP Prototype Pollution in jquery.cookie
jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...
Prototype Pollution in jquery.cookie
jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...
