CVE-2026-13605

The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Because the title attribute survives the post-content sanitization applied to users who lack the unfilteredhtml...

CVE-2025-13605

creationtimestamp| type| source ---|---|--- 2026-05-04 07:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2025-13605 2026-05-04 16:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml24hr7urx2r...

CVE-2019-13605

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from...

CVE-2024-13605

The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13605

creationtimestamp| type| source ---|---|--- 2025-02-24 06:22:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5129 2025-02-24 07:55:30+00:00| seen| https://t.me/cvedetector/18781 2025-02-24 08:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3livx2exbbc2t 2025-02-24...

CVE-2024-13605 Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS

The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13605

The Form Maker by 10Web WordPress plugin, in versions prior to 1.15.33 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape certain plugin settings, which allows high-privilege users, such as administrators, to execute XSS attacks. Thi...

CVE-2020-13605

CVE-2020-13605 is rejected/not used per the Initial Description.

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass Vulnerability

Exploit for linux platform in category web applications Exploit Title: CWP CentOS Control Web Panel ||/us...

CVE-2019-13605

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from...

CVE-2019-13605

CVE-2019-13605 affects CentOS Web Panel (CWP) versions 0.9.8.838–0.9.8.846. The issue is an authentication bypass in the login flow that leverages a valid username and relies on defeating an encoding that is not equivalent to base64, as noted in the NVD entry and CNVD/CNVD-derived records. This i...

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass Exploit Title: CWP CentOS Control Web Panel ||//...

CentOS Control Web Panel 0.9.8.836 Authentication Bypass

Exploit Title: CWP CentOS Control Web Panel ||//theme/original CVE-2019-13360 ================================...

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass

Exploit Title: CWP CentOS Control Web Panel ||//theme/original CVE-2019-13360 ======================...

CVE-2018-13605

The CVE-2018-13605 entry concerns the mintToken function in Extreme Token (Extreme Coin) Ethereum contract (ExtremeToken). The root cause is an integer overflow that enables the contract owner to arbitrarily set any user’s balance to a chosen value. Documents consistently describe this vulnerabil...