902 matches found
CVE-2023-46355
In the module "CSV Feeds PRO" csvfeeds 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead t...
CVE-2023-22273
CVE-2023-22273 affects Adobe RoboHelp Server; the path traversal vulnerability in RoboHelp Server versions 11.4 and earlier could allow an admin-authenticated attacker to achieve remote code execution. Public sources confirm the issue as part of APSB23-53 (update to 11 Update 5). The connected do...
CVE-2023-36688
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Mann Simple Site Verify plugin = 1.0.7 versions...
CVE-2023-46199
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Triberr plugin = 4.1.1 versions...
CVE-2023-45833
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in LeadSquared Suite plugin = 0.7.4 versions...
CVE-2023-45832
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson WP GoToWebinar plugin = 14.45 versions...
CVE-2023-45768
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Stephanie Leary Next Page plugin = 1.5.2 versions...
CVE-2023-45644
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin = 1.0 versions...
CVE-2023-39924
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mitchell Bennis Simple File List plugin = 6.1.9 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kardi Order auto complete for WooCommerce plugin = 1.2.0 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPJohnny Comment Reply Email plugin = 1.0.3 versions...
CVE-2023-45056
Open User Map (WordPress plugin by 100plugins)
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...
PT-2023-28100 · Unknown · Uniconsent Cmp
Name of the Vulnerable Software and Affected Versions: UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin versions prior to 1.4.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allo...
PT-2023-28068 · WordPress · Sendpress Newsletters
Name of the Vulnerable Software and Affected Versions: SendPress Newsletters plugin versions prior to 1.22.3.31 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker to inje...
Proofpoint Insider Threat Management Cross-Site Scripting Vulnerability
Proofpoint Insider Threat Management Proofpoint ITM is an insider threat management system from Proofpoint Inc. in the United States. A cross-site scripting vulnerability exists in Insider Threat Management versions prior to 7.14.3.69, which stems from the presence of a Reflected Cross-Site...
CVE-2023-40329
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPZest Custom Admin Login Page | WPZest plugin = 1.2.0 versions...
CVE-2023-39987
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ajay Lulia wSecure Lite plugin = 2.5 versions...