12 matches found
CVE-2026-22692 October CMS: Twig Sandbox Bypass via Collection Methods
October is a Content Management System CMS and web platform. Versions prior to 3.7.13 and versions 4.0.0 through 4.1.4 contain a sandbox bypass vulnerability in the optional Twig safe mode feature CMSSAFEMODE. Certain methods on the collect helper were not properly restricted, allowing...
CVE-2026-22692
creationtimestamp| type| source ---|---|--- 2026-04-14 06:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/80224 2026-04-14 07:00:13+00:00| published-proof-of-concept| Telegram/jkyf9FzBP6ABW034R3vx4BiSgaWbMQXv6i-pn331gsPUnTk 2026-04-14 15:00:07+00:00| published-proof-of-concept...
CVE-2025-22692
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rachanaS Sponsered Link sponsered-link allows Reflected XSS.This issue affects Sponsered Link: from n/a through = 4.0...
CVE-2025-22692 WordPress Sponsered Link plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rachanaS Sponsered Link sponsered-link allows Reflected XSS.This issue affects Sponsered Link: from n/a through = 4.0...
CVE-2025-22692
The CVE-2025-22692 entry concerns the WordPress Sponsered Link plugin (versions n/a through 4.0) with a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected component is the plugin’s input processing that leads to XSS w...
CVE-2023-22692
creationtimestamp| type| source ---|---|--- 2023-05-22 12:25:30+00:00| seen| https://t.me/cibsecurity/64508...
CVE-2023-22692 WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Jeroen Peters Name Directory plugin = 1.27.1 versions...
CVE-2023-22692 WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Jeroen Peters Name Directory plugin = 1.27.1 versions...
CVE-2023-22692
CVE-2023-22692 : Cross-Site Request Forgery (CSRF) in the WordPress plugin “Name Directory” (Jeroen Peters) affecting versions
WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Name Directory Type Plugin Vulnerable versions = 1.27.1 Fixed in 1.27.2 OWASP Top 10 A6: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2023-22692 Patch priority Low CVSS severity Low 4.3 Developer Jeroen Peters PSID 97cd32d13c24 Credits NeginNrb Require...