1004 matches found
CVE-2025-54301 Extension - norrnext.com - Stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla
A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. File names are not properly escaped...
CVE-2025-54301
CVE-2025-54301 affects the Quantum Manager component for Joomla (versions 1.0.0–3.2.0). The vulnerability is a stored XSS caused by file names not being properly escaped, as described in multiple sources. No exploitation details are provided in the documents, and a concrete patched version is not...
PT-2025-34598 · Joomla +1 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: Quantum Manager versions 1.0.0 through 3.2.0 Description: A stored cross-site scripting XSS issue exists in the Quantum Manager component for Joomla. File names are not properly escaped, which could allow for malicious code execution...
Linux Distros Unpatched Vulnerability : CVE-2017-13743
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a buffer overflow in Liblouis 3.2.0, triggered in the function loushowString in utils.c, that will lead to a remote denial of service attack...
WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Sessions versions = 3.2.0...
CVE-2025-57890
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through = 3.2.0...
CVE-2025-57890 WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through = 3.2.0...
CVE-2025-57890 WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through = 3.2.0...
CVE-2025-57890
CVE-2025-57890: A stored XSS in WordPress Sessions Plugin (versions up to 3.2.0) arises from improper input neutralization during web page generation. Affected: Sessions plugin total versions through 3.2.0 (no vendor/version specifics beyond 3.2.0). Impact is listed as low in confidentiality, int...
WordPress plugin Sessions 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-34354 · Unknown · Pierre Lannoy Sessions
Name of the Vulnerable Software and Affected Versions: Pierre Lannoy Sessions versions through 3.2.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting XSS. Recommendations: Update Pierre Lannoy...
Linux Distros Unpatched Vulnerability : CVE-2014-2901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfssl before 3.2.0 does not properly issue certificates for a server's hostname. CVE-2014-2901 Note that Nessus relies on the presence of the package as...
CVE-2012-10059
Dolibarr ERP/CRM contains a post-authenticated OS command injection in its database backup feature. In versions <= 3.1.1 and
CVE-2025-8751
A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of the component Block Page. The manipulation of the argument Category leads to cross site scripting. It is possible to initiate the attack...
CVE-2025-8751
A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of the component Block Page. The manipulation of the argument Category leads to cross site scripting. It is possible to initiate the attack...
CVE-2025-8751 Protected Total WebShield Extension Block Page cross site scripting
A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of the component Block Page. The manipulation of the argument Category leads to cross site scripting. It is possible to initiate the attack...
CVE-2025-8751
CVE-2025-8751 affects Protected Total WebShield Extension up to version 3.2.0 (Chrome), specifically the Block Page component. The issue arises from manipulation of the Category parameter, which can trigger a cross-site scripting (XSS) vulnerability. The attack can be initiated remotely, but the ...
Total WebShield Extension 代码注入漏洞
Total WebShield Extension is a browser extension from Total WebShield that enhances web security. A code injection vulnerability exists in Total WebShield Extension 3.2.0 and earlier versions, which stems from improper handling of the parameter Category and could lead to cross-site scripting...
PT-2025-32432 · Unknown · Protected Total Webshield Extension
Name of the Vulnerable Software and Affected Versions: Protected Total WebShield Extension versions up to 3.2.0 Description: A vulnerability exists in the Block Page component of Protected Total WebShield Extension. Manipulation of the Category argument can lead to cross-site scripting XSS. The...
VulnCheck KEV: CVE-2025-24000
Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through = 3.2.0...