227 matches found
WordPress WP-CRM System plugin <= 3.4.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin WP-CRM System versions = 3.4.5...
CVE-2025-56382
A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...
EUVD-2020-22441
Malware in sbrugna...
EUVD-2018-14908
Malware in sbrugna...
EUVD-2020-22360
Malware in sbrugna...
EUVD-2020-6845
Malware in sbrugna...
EUVD-2020-6867
Malware in sbrugna...
EUVD-2020-6844
Malware in sbrugna...
EUVD-2020-22746
Malware in sbrugna...
EUVD-2020-6846
Malware in sbrugna...
EUVD-2018-15169
Malware in sbrugna...
EUVD-2025-32559
A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...
CVE-2025-56382
A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...
CVE-2025-56382
A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...
CVE-2025-56382
A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...
CVE-2025-56382
The CVE-2025-56382 entry describes a stored XSS in LionCoders SalePro POS 5.4.8, specifically in the Customer Management Module. An authenticated user can inject script or HTML via the 'Customer Name' field when creating or editing a customer profile. The input is not properly sanitized before st...
PT-2025-40921
Name of the Vulnerable Software and Affected Versions LionCoders SalePro POS version 5.4.8 Description A stored Cross-site scripting XSS issue exists within the Customer Management Module. An authenticated attacker can inject arbitrary web script or HTML through the Customer Name parameter during...
EUVD-2025-25171
Malicious code in bioql PyPI...