GHSA-Q496-Q274-JGH9 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-45754

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, the Mailjet mailer bridge and LOX24 notifier bridge webhook parsers received configured webhook secrets but did not verify them, allowing unauthenticated POST...

CVE-2026-45754 Symfony: Mailjet Mailer Webhook Parser Never Verifies the Configured Secret — Unauthenticated Webhook Event Injection

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, the Mailjet mailer bridge and LOX24 notifier bridge webhook parsers received configured webhook secrets but did not verify them, allowing unauthenticated POST...

CVE-2026-45754 Symfony: Mailjet Mailer Webhook Parser Never Verifies the Configured Secret — Unauthenticated Webhook Event Injection

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, the Mailjet mailer bridge and LOX24 notifier bridge webhook parsers received configured webhook secrets but did not verify them, allowing unauthenticated POST...

CVE-2026-45754

creationtimestamp| type| source ---|---|--- 2026-05-20 11:01:54+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqwngpbt23 2026-05-20 14:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qc4eg22q 2026-07-14 20:11:37+00:00| seen|...

CVE-2025-45754

A stored cross-site scripting XSS vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name...

CVE-2025-45754

creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17163...

CVE-2025-45754

A stored cross-site scripting XSS vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name...

CVE-2025-45754

A stored cross-site scripting (XSS) vulnerability exists in SeedDMS version 6.0.32 , a PHP and MySQL-based document management system. An attacker can inject malicious JavaScript payloads by creating a document that includes an XSS payload within the document name . This vulnerability allows for ...

CVE-2024-45754

creationtimestamp| type| source ---|---|--- 2024-10-12 01:05:55+00:00| seen| https://t.me/cvedetector/7753...

CVE-2024-45754

A SQL injection vulnerability exists in the centreon-bi-server component of Centreon BI Server . The flaw stems from improper handling of inputs when listing configured reporting jobs. This vulnerability is only accessible to authenticated users with high-privileged access . Affected versions inc...

CVE-2023-45754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form allows Stored XSS.This issue affects Easy Testimonial Slider and Form: from n/a through 1.0.18...

CVE-2023-45754

CVE-2023-45754 : A stored Cross-Site Scripting (XSS) flaw in the WordPress plugin “Easy Testimonial Slider and Form” (versions ≤ 1.0.18). The root cause is improper input neutralization during web page generation, enabling an attacker (with administrator privileges per PatchStack/Wordfence contex...

WordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)

Software Easy Testimonial Slider and Form Type Plugin Vulnerable versions = 1.0.18 Fixed in 1.0.19 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45754 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 10c1fae73b88 Credits Rio...

Ec-Cube cross-site scripting vulnerability (CNVD-2021-45754)

Ec-Cube is an open source system for creating shopping websites. A cross-site scripting vulnerability exists in Ec-Cube. An attacker can exploit this vulnerability by tricking an administrator or user into visiting a specially crafted page and performing certain actions to execute arbitrary scrip...