CVE-2022-24676

updatecode in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive...

CVE-2021-24676

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

CVE-2025-24676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in umangmetatagg Custom WP Store Locator custom-store-locator allows Reflected XSS.This issue affects Custom WP Store Locator: from n/a through = 1.4.7...

CVE-2025-24676 WordPress Custom WP Store Locator plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in umangmetatagg Custom WP Store Locator allows Reflected XSS.This issue affects Custom WP Store Locator: from n/a through 1.4.7...

CVE-2023-24676

creationtimestamp| type| source ---|---|--- 2024-01-24 22:27:19+00:00| seen| https://t.me/ctinow/173129 2024-01-31 02:17:09+00:00| seen| https://t.me/ctinow/176422 2024-02-18 11:06:12+00:00| seen| https://t.me/ctinow/187211...

CVE-2023-24676

An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the downloadzipurl parameter when installing a new module. NOTE: this is disputed because exploitation requires that the attacker is able to enter requests as an admin; however, a...

CVE-2023-24676

ProcessWire 3.0.210 is affected by a vulnerable download_zip_url parameter used when installing a new module, which can allow arbitrary code execution and a reverse shell. The Red Hat, Veracode, OSV, and related entries concur with the core issue; exploitation is described as requiring admin priv...

CVE-2022-24676

creationtimestamp| type| source ---|---|--- 2022-02-09 02:12:14+00:00| seen| https://t.me/cibsecurity/37037...

CVE-2022-24676

updatecode in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive...

CVE-2022-24676

updatecode in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive...

CVE-2021-24676

creationtimestamp| type| source ---|---|--- 2021-10-04 16:23:17+00:00| seen| https://t.me/cibsecurity/29861...

CVE-2021-24676

CVE-2021-24676 affects the WordPress plugin Better Find and Replace up to version 1.2.8 (vulnerability exists before 1.2.9). The flaw is a Reflected Cross-Site Scripting (XSS) where the GET parameter 's' is not properly escaped before being echoed on the All Masking Rules page. Root cause: inadeq...

CVE-2021-24676 Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

CVE-2020-24676

creationtimestamp| type| source ---|---|--- 2020-12-23 00:54:08+00:00| seen| https://t.me/cibsecurity/21204...

CVE-2020-24676 Insecure Windows Services in Symphony Plus

In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks. An unprivileged but authenticated user could execute arbitrary code and result in privilege escalation, depending on the user that the service runs as...

CVE-2020-24676

The CVE-2020-24676 entry affects Symphony Plus Operations and Symphony Plus Historian : unprivileged but authenticated users can leverage vulnerable services to achieve arbitrary code execution with privilege escalation, depending on the account the service runs under. The documented impact is pr...