CVE-2025-52206

ISPConfig version 3.3.0 is vulnerable to a Cross Site Scripting (XSS) flaw located in the system status webpage . This vulnerability could allow an attacker to perform cross-site scripting attacks, which may lead to the execution of arbitrary code. Documentation provides a sample exploit payload:...

CVE-2023-52206

creationtimestamp| type| source ---|---|--- 2024-01-08 21:27:01+00:00| seen| https://t.me/ctinow/164652 2024-01-25 15:11:34+00:00| seen| https://t.me/ctinow/173492...

CVE-2023-52206

CVE-2023-52206 affects the WordPress plugin "Page Builder: Live Composer" (Live Composer Page Builder) up to version 1.5.25. The issue is described as deserialization of untrusted data leading to PHP object injection via deserialization. Patchstack and CVE records indicate the fix is available in...

WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

Software Page Builder: Live Composer Type Plugin Vulnerable versions = 1.5.25 Fixed in 1.5.29 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52206 Patch priority Medium CVSS severity Medium 7.7 Developer Claim ownership PSID cbdb1d60e22e Credits Le Ngoc Anh Required...