CVE-2025-5116

The WP Plugin Info Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerid’ parameter in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-5116

creationtimestamp| type| source ---|---|--- 2025-06-03 09:28:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxt5jkxej2...

CVE-2025-5116 WP Plugin Info Card <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter

The WP Plugin Info Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerid’ parameter in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-5116 WP Plugin Info Card <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter

The WP Plugin Info Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerid’ parameter in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-5116

The CVE-2025-5116 entry concerns the WordPress plugin WP Info Card. Affected: WP Plugin Info Card for WordPress up to version 5.3.1. Issue: Stored Cross-Site Scripting via the containerid parameter caused by insufficient input sanitization and output escaping. Root cause: incomplete patch for CVE...

WordPress WP Plugin Info Card plugin <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via containerid Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin WP Plugin Info Card versions = 5.3.1...

CVE-2013-5116

Evernote prior to 5.5.1 has insecure password change...

CVE-2009-5116

McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account...

CVE-2024-5116

creationtimestamp| type| source ---|---|--- 2025-02-14 09:46:59+00:00| seen| Telegram/sjtaCWA3My2snBFcOvmpwzmQsS7JnDlJbHx3-rrVRijpqMq...

CVE-2024-5116

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The...

CVE-2024-5116

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The...

CVE-2024-5116

CVE-2024-5116 affects SourceCodester Online Examination System 1.0. The vulnerability is in an unknown function of save.php where manipulating the vote parameter leads to a SQL injection. It is a network, low-attack-complexity issue with no user interaction and can be exploited remotely; exploita...

CVE-2024-5116 SourceCodester Online Examination System save.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The...

CVE-2019-5116

creationtimestamp| type| source ---|---|--- 2024-01-29 09:11:08+00:00| seen| https://t.me/ctinow/175111...

CVE-2023-5116

creationtimestamp| type| source ---|---|--- 2023-10-31 15:50:56+00:00| seen| https://t.me/cibsecurity/73224...

CVE-2023-5116

CVE-2023-5116 affects the WordPress plugin Live updates from Excel (ipushpull). The vulnerability is a Stored Cross-Site Scripting (XSS) in the ipushpull_page shortcode, caused by insufficient input sanitization and output escaping of user-supplied attributes. Affected versions are up to 2.3.2; e...

RHEL 8 : Red Hat OpenStack Platform 16.2 (puppet-firewall) (RHSA-2022:5116)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:5116 advisory. Manages Firewalls such as iptables Security Fixes: unmanaged rules could leave system in an unsafe state via duplicate comment CVE-2022-0675 For more...

Mageia: Security Advisory (MGASA-2017-0423)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0215)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Security Advisory (MFSA2018-02) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...