823 matches found
WordPress plugin Progress Bar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...
PT-2023-19138 · Unknown · Chris Reynolds Progress Bar Plugin
Name of the Vulnerable Software and Affected Versions: Chris Reynolds Progress Bar plugin versions = 2.2.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. Recommendations: For Chris Reynolds Progress B...
CVE-2023-30615 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web
Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...
CVE-2023-30615 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web
Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...
Iris 跨站脚本漏洞
Iris is a fast, simple, yet full-featured and very efficient Go web framework. A security vulnerability exists in Iris versions prior to 2.2.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows an attacker to inject malicious script into an application,...
Jenkins Plugin Sidebar Link 路径遍历漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
PT-2023-23208 · Wjj · Innokb Server +1
Name of the Vulnerable Software and Affected Versions: WJJ Software - InnoKB Server, InnoKB/Console version 2.2.1 Description: The issue is related to a path traversal problem, which is a type of security weakness that allows an attacker to access files or directories outside the intended directo...
CVE-2023-31180 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS)
WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...
CVE-2023-31180
WJJ Software InnoKB Server/Console 2.2.1 is affected by reflected cross-site scripting (RXSS) via an unspecified request. The vulnerability is documented across multiple feeds, with CVSS v3.1 metrics indicating Networks access, Low attack complexity, and user interaction required. There is no exp...
CVE-2023-31181
Affected software: WJJ Software InnoKB Server and InnoKB/Console, version 2.2.1. Issue: Path traversal (CWE-22) that allows accessing files/directories outside the intended root due to improper input handling. Documented impact aligns with high confidentiality impact per CVSS 3.1 but no exploitab...
Wjj Software InnoKB 跨站脚本漏洞
Wjj Software InnoKB is a web-based collaborative multi-user knowledge management software tool from Wjj Software. A security vulnerability exists in Wjj Software InnoKB version 2.2.1, which can be exploited by an attacker to cause cross-site scripting via an unspecified request...
PT-2023-23207 · Wjj · Innokb Server +1
Name of the Vulnerable Software and Affected Versions: WJJ Software - InnoKB Server, InnoKB/Console version 2.2.1 Description: The issue is related to reflected cross-site scripting RXSS through an unspecified request. This allows for potential malicious script injection and execution. No...
GHSA-F9XV-Q969-PQX4 Uncaught Exception in yaml
Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin = 2.2.1 versions...
WordPress Plugin Popup Anything 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2023-13583 · WordPress +1 · Essential Plugin Popup Anything +1
Name of the Vulnerable Software and Affected Versions: WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin versions = 2.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user...
GHSA-WP72-7HJ9-5265 Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs
Impact Users of the MLflow Open Source Project who are hosting the MLflow Model Registry using the mlflow server or mlflow ui commands using an MLflow version older than MLflow 2.2.1 may be vulnerable to a remote file existence check exploit if they are not limiting who can query their server for...
GHSA-XG73-94FP-G449 mlflow is vulnerable to remote file access in `mlflow server` and `mlflow ui` CLIs
Impact Users of the MLflow Open Source Project who are hosting the MLflow Model Registry using the mlflow server or mlflow ui commands using an MLflow version older than MLflow 2.2.1 may be vulnerable to a remote file access exploit if they are not limiting who can query their server for example,...
