National Keep CyberMath Cross-Site Scripting Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A cross-site scripting vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from improper input neutralization during web page generation, resulting in a stored...

PT-2024-15042

Name of the Vulnerable Software and Affected Versions CyberMath versions 1.4 through 1.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This affects the CyberMath software. Recommendations F...

National Keep CyberMath Cross-Site Scripting Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A cross-site scripting vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from improper input neutralization during web page generation, resulting in a reflected...

CVE-2023-6390 WordPress Users <= 1.4 - Settings Update via CSRF

The WordPress Users WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

PT-2024-14950 · WordPress · Wordpress Users

Name of the Vulnerable Software and Affected Versions: WordPress Users WordPress plugin versions 1.4 and earlier Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack...

WordPress plugin WordPress Users Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress Browser Theme Color Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Browser Theme Color Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-22291 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f3cc2d8b5b16 Credits Nguyen Xuan Chien...

CVE-2023-50873

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

CVE-2023-50873

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

CVE-2023-6769

Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4. This vulnerability allows a remote attacker to store a malicious JavaScript payload in the "lpadmin.php" file in the "question" and "item" parameters. This vulnerability could lead to malicious JavaScript execution...

CVE-2023-6769

Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4. This vulnerability allows a remote attacker to store a malicious JavaScript payload in the "lpadmin.php" file in the "question" and "item" parameters. This vulnerability could lead to malicious JavaScript execution...

Amazing Little Poll License Issue Vulnerability

Amazing Little Poll is Amazing Little Poll open source a very simple php voting script. An authorization issue vulnerability exists in Amazing Little Poll version 1.3, 1.4. An attacker can exploit this vulnerability to access the admin panel by bypassing authentication...

CVE-2023-49816

Cross-Site Request Forgery CSRF vulnerability in Innovative Solutions Fix My Feed RSS Repair.This issue affects Fix My Feed RSS Repair: from n/a through 1.4...

PT-2023-31370 · Unknown · Fix My Feed Rss Repair

Name of the Vulnerable Software and Affected Versions: Fix My Feed RSS Repair versions 1.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

PT-2023-32769 · Unknown · Amazing Little Poll

Name of the Vulnerable Software and Affected Versions: Amazing Little Poll versions 1.3 through 1.4 Description: The issue allows an unauthenticated user to access the admin panel without providing any credentials by accessing the "lp admin.php?adminstep=" parameter. This could enable unauthorize...

WordPress Evergreen Content Poster Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Evergreen Content Poster Type Plugin Vulnerable versions = 1.4 Fixed in 1.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-41127 Patch priority Low CVSS severity Low 5.9 Developer Evergreen Content Poster PSID 35d54e5980dd Credits DoYeon Park p6rkdoye0n...

CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

Sql injection

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

LMXCMS SQL注入漏洞

lmxcms dream cms is a website building system of China dream cms lmxcms company. A SQL injection vulnerability exists in LMXCMS v1.4, which stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute arbitrary code vi...