CVE-2023-40204

CVE-2023-40204 (WordPress Folders plugin) : Unrestricted Upload of File with Dangerous Type in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager. Affected versions: plugin 2.9.2, specifically 2.9.3 or later, as cited by Patchstack. Additional context...

CVE-2023-40204 WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager.This issue affects Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager: from n/a through 2.9.2...

WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload

Software Folders Type Plugin Vulnerable versions = 2.9.2 Fixed in 2.9.3 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-40204 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID c5881308f6ec Credits Rafie Muhammad Patchstack Required privileg...

CVE-2022-40204

creationtimestamp| type| source ---|---|--- 2022-12-01 02:30:03+00:00| seen| https://t.me/cibsecurity/53738...

CVE-2022-40204

CVE-2022-40204 is an XSS in Digital Alert Systems DASDEC software, affecting all current versions via the Host Header on undisclosed pages after login. The vulnerability is documented across multiple feeds: NVD lists CVSS v3.1 base score 4.1 (I/L, C/N, A/N) with network attack vector, low complex...

Digital Alert Systems DASDEC

1. EXECUTIVE SUMMARY CVSS v3 4.7 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Digital Alert Systems Equipment: DASDEC Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities might result in false alerts...