WordPress plugin WP e-Commerce Style Email 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

JoomlaUX JUX Real Estate 代码注入漏洞

JoomlaUX JUX Real Estate is a Joomla component from JoomlaUX designed to meet a wide range of real estate related needs. A code injection vulnerability exists in JoomlaUX JUX Real Estate version 3.4.0, which stems from a cross-site scripting attack that could lead to a remote attack...

ContentTools 代码注入漏洞

ContentTools is a getme open source JS library for building WYSIWYG editors for HTML content. A code injection vulnerability exists in ContentTools 1.6.16 and earlier versions, which stems from a cross-site scripting attack and could lead to a remote attack...

Dante 代码注入漏洞

Dante is an application by the individual developer Miguel Michelson Martinez. A code injection vulnerability exists in Dante version 0.4.4 and earlier, which stems from a cross-site scripting attack that could lead to a remote attack...

PHPGurukul Medical Card Generation System 代码注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A code injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from an incorrect manipulation of the parameter searchdata that could lead to a...

CVE-2024-0640

A stored cross-site scripting XSS vulnerability exists in chatwoot/chatwoot versions 3.0.0 to 3.5.1. This vulnerability allows an admin user to inject malicious JavaScript code via the dashboard app settings, which can then be executed by another admin user when they access the affected dashboard...

CVE-2024-10252

A vulnerability in langgenius/dify versions =v0.9.1 allows for code injection via internal SSRF requests in the Dify sandbox service. This vulnerability enables an attacker to execute arbitrary Python code with root privileges within the sandbox environment, potentially leading to the deletion of...

Exploit for Code Injection in Theme-Fusion Avada

CVE-2024-13346 Avada Theme 7.11.14 - Unauthenticated Arbi...

crud 代码注入漏洞

crud is a minimalist backend management system developed by Yang Youwang, an individual developer in China. A code injection vulnerability exists in crud version 1.0.0, which originates from a cross-site scripting attack...

crud 代码注入漏洞

crud is a minimalist backend management system by the individual developer Yang Youwang in China. A code injection vulnerability exists in crud version 1.0.0, which stems from improper operation of the Role Management Page component and could lead to a cross-site scripting attack...

WordPress plugin Block Logic 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

CicadasCMS 代码注入漏洞

CicadasCMS is a content management system. CicadasCMS code injection vulnerability can be exploited by attackers to conduct cross-site scripting attacks...

CVE-2025-2597

Reflected Cross-Site Scripting XSS in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘idsession...

SAP BusinessObjects Business Intelligence Platform Code Injection Vulnerability

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP, combining market-leading SAP data integration products, data management products and business intelligence products to eliminate system integration challenges and quickly and easily deploy...

Code-Projects Human Resource Management System 代码注入漏洞

Code-Projects Human Resource Management System is an open source human resource management system from Code-Projects. A code injection vulnerability exists in Code-Projects Human Resource Management System version 1.0.1, which stems from a code injection vulnerability in the handler A cross-site...

Liferay DXP XSS (CVE-2025-2536)

The detected install of Liferay DXP is affected by a cross-site scripting XSS vulnerability in the Frontend JS module's layout-taglib/liferay/index.js that allows remote attackers to inject arbitrary web script or HTML via toastData parameter Note that Nessus has not tested for this issue but has...

March Linux Patch Wednesday

MarchLinux Patch Wednesday. Total vulnerabilities: 1083. 879 in the Linux Kernel. Two vulnerabilities show signs of exploitation in the wild: Code Injection - GLPI CVE-2022-35914. An old vulnerability from CISA KEV, but first patched on March 3 in RedOS Linux. Memory Corruption - Safari...

CVE-2024-21760

An improper control of generation of code 'Code Injection' vulnerability CWE-94 in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code...

CVE-2019-13029

Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...

GHSA-JCCX-M9V4-9HWH LoLLMS Code Injection vulnerability

A remote code execution vulnerability exists in the Calculate function of parisneo/lollms version 9.8. The vulnerability arises from the use of Python's eval function to evaluate mathematical expressions within a Python sandbox that disables builtins and only allows functions from the math module...