PT-2024-16312 · WordPress · The Page Builder Gutenberg Blocks – Coblocks

Name of the Vulnerable Software and Affected Versions: The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress versions up to, and including, 3.1.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Icon Widget due to insufficient input sanitization and...

Lychee 安全漏洞

Lychee is a beautiful and easy to use photo management system from The Lychee Organisation open source. It is used to manage and share photos. A security vulnerability exists in Lychee version 3.1.6, which stems from a cross-site scripting XSS vulnerability. The vulnerability can be exploited by ...

CVE-2024-25807

Lychee 3.1.6 is affected by a Cross Site Scripting (XSS) vulnerability exploitable via the title parameter when creating an album. The root cause is an XSS flaw in the album-creation flow, allowing remote attackers to execute arbitrary code and access sensitive information. The PT-Security entry ...

PT-2024-21141 · Lychee · Lychee

Name of the Vulnerable Software and Affected Versions: Lychee version 3.1.6 Description: A Cross-site Request Forgery CSRF issue allows remote attackers to execute arbitrary code via the create new album function. This can be exploited to perform unauthorized actions on the affected system...

PT-2024-21140 · Lychee · Lychee

Name of the Vulnerable Software and Affected Versions: Lychee version 3.1.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the title parameter when creating an album. This is a Cross Site Scripting XSS issue. Recommendations: For Lych...

CVE-2023-52132

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jewel Theme WP Adminify.This issue affects WP Adminify: from n/a through 3.1.6...

Design/Logic Flaw

A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address th...

Ortus Solutions ColdBox Elixir Information Disclosure Vulnerability

Ortus Solutions ColdBox Elixir is a professional open source software from Ortus Solutions that provides custom development, training, server tuning, security hardening, code review, professional support and guidance. An information disclosure vulnerability exists in Ortus Solutions ColdBox Elixi...

CVE-2023-44266

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jewel Theme WP Adminify plugin = 3.1.6 versions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

TheHive Authorization Issues Vulnerability

TheHive is a scalable open source security incident response platform. A security vulnerability exists in StrangeBee TheHive that stems from a vulnerability that allows an attacker to gain privileges through the Active Directory authentication mechanism. Affected products and versions: StrangeBee...

PT-2023-27530 · WordPress · Wp Adminify

Name of the Vulnerable Software and Affected Versions: WP Adminify WordPress plugin versions prior to 3.1.6 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, fo...

WordPress WP Adminify Plugin < 3.1.6 is vulnerable to Cross Site Scripting (XSS)

Software WP Adminify Type Plugin Vulnerable versions 3.1.6 Fixed in 3.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4060 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5e42dd53e8bc Credits dipak panchal Required privile...

Social-Commerce 3.1.6 Cross Site Scripting

Exploit Title: Social-Commerce 3.1.6 - Reflected XSS Exploit Author: CraCkEr Date: 28/07/2023 Vendor: mooSocial Vendor Homepage: https://moosocial.com/ Software Link: https://social-commerce.moosocial.com/ Tested on: Windows 10 Pro Impact: Manipulate the content of the site CVE: CVE-2023-4174...

CVE-2023-4174

A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-236209 was assigned to this vulnerability...

CVE-2023-4174

mooSocial mooStore 3.1.6 is affected by a reflected cross-site scripting vulnerability. The Nuclei template and exploit-db entry describe an XSS that can be triggered remotely via crafted input (e.g., /search/index?q=...). The issue impacts an unknown functionality; attacker-controlled input may ...

CVE-2023-4173

A vulnerability, which was classified as problematic, was found in mooSocial mooStore 3.1.6. Affected is an unknown function of the file /search/index. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this...

CVE-2023-4173

CVE-2023-4173 affects mooSocial mooStore 3.1.6; a cross-site scripting flaw resides in the /search/index handler via the q parameter. The vulnerability can be triggered remotely, enabling execution of malicious scripts in a victim’s browser (XSS) and potentially session/token theft. Public proof-...

mooSocial mooStore Cross-Site Scripting Vulnerability

mooSocial mooStore is a store application from mooSocial, Inc. A cross-site scripting vulnerability exists in mooSocial mooStore version 3.1.6. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...