WordPress Zita Elementor Site Library plugin <= 1.6.2 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Lucio Sá in WordPress Plugin Zita Elementor Site Library versions = 1.6.2...

Kruise Security Vulnerabilities

Kruise is an application from the Cloud Native Computing Foundation CNCF. A security vulnerability exists in kruise version v1.6.2. An attacker exploited the vulnerability to access sensitive data and elevate privileges by obtaining a token for a service account...

WordPress Giphypress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Giphypress versions = 1.6.2...

WordPress Giphypress Plugin <= 1.6.2 is vulnerable to Cross Site Scripting (XSS)

Software Giphypress Type Plugin Vulnerable versions = 1.6.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33927 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 38e85a1b0eaa Credits Ngô Thiên An ancorn from VNPT-VCI Required...

CVE-2024-31621

An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component...

WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Advanced Local Pickup for WooCommerce versions = 1.6.2...

WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.6.2 is vulnerable to Broken Access Control

Software Advanced Local Pickup for WooCommerce Type Plugin Vulnerable versions = 1.6.2 Fixed in 1.6.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31283 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 66c7c49037fc Credits Majed...

BIT-CONSUL-2020-7219

HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3...

CVE-2022-21698 affecting package rook for versions less than 1.6.2-18

CVE-2022-21698 affecting package rook for versions less than 1.6.2-18. A patched version of the package is available...

CVE-2024-0909

The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticat...

Bees Blog Security Breach

Bees Blog is the official blog module of dirty bees. A security vulnerability exists in Bees Blog versions prior to 1.6.2, which stems from improper handling of controllers/front/post.phpsharingurl, leading to cross-site scripting...

PT-2023-31181

Name of the Vulnerable Software and Affected Versions MP3Gain version 1.6.2 Description A stack buffer overflow issue allows an attacker to cause a denial of service. This is related to the WriteMP3GainAPETag function at apetag.c:592. Recommendations For MP3Gain version 1.6.2, consider avoiding t...

CVE-2023-50834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech WooCommerce Menu Extension allows Stored XSS.This issue affects WooCommerce Menu Extension: from n/a through 1.6.2...

WordPress plugin WooCommerce Menu Extension cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-31665 · WordPress · Woocommerce Menu Extension

Name of the Vulnerable Software and Affected Versions: WooCommerce Menu Extension versions 1.6.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of malicious script...

CVE-2023-41597

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet...

CVE-2023-41597

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet...

EyouCms Cross-Site Scripting Vulnerability

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A cross-site scripting vulnerability exists in EyouCms v1.6.2, which stems from poor filtering of the activet parameter in the twitter.php file, resulti...

CVE-2023-37966

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2...

Moodle < 1.6.2 SQLi Vulnerability

Moodle is prone to an sql injection SQLi vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle";...