PT-2022-16380

Name of the Vulnerable Software and Affected Versions Access Demo Importer versions 1.0.7 and earlier Description The issue allows an attacker to perform a Cross-Site Request Forgery CSRF attack, enabling them to reset all data, including posts, pages, and media, on WordPress sites using the Acce...

Seowon 130-SLC router 安全漏洞

Seowon 130-SLC router is a router from Seowon, South Korea. A security vulnerability exists in all versions of the Seowon 130-SLC router from September 15, 2021, which stems from the queriesCnt parameter being susceptible to remote code execution...

Metabase 安全漏洞

Metabase is an open source data analytics platform from Metabase, Inc. in the United States. Metabase suffers from a security vulnerability that stems from the fact that SQLite has an FDW-like feature called ATTACH DATABASE that allows multiple SQLite databases to be connected via an initial join...

CVE-2022-22571

An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions...

CVE-2022-0914

The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages including private and draft into an arbitrary CSV file, which the attacker can then download and retrieve the list of...

CVE-2022-0892

The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

Cross site request forgery (csrf)

The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages including private and draft into an arbitrary CSV file, which the attacker can then download and retrieve the list of...

CVE-2022-0914

The CVE-2022-0914 entry concerns the WordPress plugin “Export All URLs” (before version 4.3). According to connected sources (Red Hat, NVD, CVE records, Patchstack), the vulnerability is a CSRF flaw that can allow a logged-in admin to export all posts and pages (including private/draft) into an a...

CVE-2022-0892

The CVE-2022-0892 entry concerns the WordPress plugin Export All URLs (versions before 4.2). The root cause is improper sanitization/escaping of the CSV filename when outputting it on the page, which enables a Reflected Cross-Site Scripting (XSS) attack. Documented impact is a reflected XSS in pa...

CVE-2022-0892: Improper Neutralization of Input During Web Page Generation

The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

PT-2022-13522

Name of the Vulnerable Software and Affected Versions Export All URLs WordPress plugin versions prior to 4.3 Description The issue allows attackers to make a logged-in admin export all posts and pages, including private and draft ones, into an arbitrary CSV file. This could enable the attacker to...

WordPress All In One WP Security plugin <= 4.4.10 - Authenticated Arbitrary Redirect / Reflected XSS vulnerability

Authenticated Arbitrary Redirect / Reflected XSS vulnerability discovered by JrXnm in WordPress All In One WP Security plugin versions = 4.4.10. Solution Update the WordPress All In One WP Security plugin to the latest available version at least 4.4.11...

CVE-2022-0914: Cross-Site Request Forgery (CSRF)

The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages including private and draft into an arbitrary CSV file, which the attacker can then download and retrieve the list of...

PT-2022-13506

Name of the Vulnerable Software and Affected Versions Export All URLs WordPress plugin versions prior to 4.2 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly sanitise and escape the CSV filename before displaying it on th...

Incapptic Connect 跨站脚本漏洞

Incapptic Connect is an application plugin. A security vulnerability exists in Incapptic Connect that, due to incorrect output encoding in Incapptic Connect, allows an authenticated, elevated privileged user to perform a stored XSS attack and affects all current versions...

CVE-2022-27063

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via viewallcomments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...

PT-2022-18201

Name of the Vulnerable Software and Affected Versions AeroCMS version 0.0.1 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field, exploiting a stored cross-site scripting XSS vulnerability in the view all...

all-poetry.net Cross Site Scripting vulnerability OBB-2469867

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-28381

Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932...

URL Redirection to Untrusted Site ('Open Redirect') in express-openid-connect

Impact Users of the requiresAuth middleware, either directly or through the default authRequired option, are vulnerable to an Open Redirect when the middleware is applied to a catch all route. If all routes under example.com are protected with the requiresAuth middleware, a visit to...