1236 matches found
CVE-2024-45046
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions \PhpOffice\PhpSpreadsheet\Writer\Html doesn't sanitize spreadsheet styling information such as font names, allowing an attacker to inject arbitrary JavaScript on the page. As a result an attacker...
CVE-2024-37241
Cross-Site Request Forgery CSRF vulnerability in Automattic WP Job Manager - Resume Manager allows Cross Site Request Forgery.This issue affects WP Job Manager - Resume Manager: from n/a through 2.1.0...
CVE-2023-45609
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POWR.Io Contact Form – Custom Builder, Payment Form, and More allows Stored XSS.This issue affects Contact Form – Custom Builder, Payment Form, and More: from n/a through 2.1.0...
CVE-2023-5564
Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1...
CVE-2023-33967
EaseProbe is a tool that can do health/status checking. An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0...
CVE-2023-3192
Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...
CVE-2023-0760
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV...
CVE-2023-25711
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGlobus WPGlobus Translate Options plugin = 2.1.0 versions...
CVE-2023-6069
Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...
CVE-2023-2228
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...
CVE-2022-46867
Cross-Site Request Forgery CSRF vulnerability in Chasil Universal Star Rating plugin = 2.1.0 version...
CVE-2022-2549
NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV...
CVE-2022-3222
Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-1172
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2021-25039
The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcccontenttype, wmccsourceblog and wmccrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...
CVE-2020-5294
PrestaShop module psfacetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0...
CVE-2020-15102
In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...
CVE-2019-16211
Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...
