PT-2024-27425 · Foxiz · Foxiz

Name of the Vulnerable Software and Affected Versions: Foxiz versions 2.3.5 and earlier Description: A Server-Side Request Forgery SSRF vulnerability has been identified in Theme-Ruby Foxiz. This issue allows for unauthorized access to internal resources, potentially leading to sensitive data...

PT-2024-23876 · WordPress · Webtoffee Wordpress Comments Import & Export

Name of the Vulnerable Software and Affected Versions: WebToffee WordPress Comments Import & Export versions 2.3.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended action...

PT-2013-4484 · Ubiquiti Networks · Unifi

Name of the Vulnerable Software and Affected Versions: Ubiquiti Networks UniFi versions 2.3.5 and earlier Description: A cross-site scripting XSS issue exists in the administer interface of the UniFi Controller, allowing remote attackers to inject arbitrary web script or HTML via a crafted client...