Trix 跨站脚本漏洞

Trix is a Basecamp open source rich text editor for everyday writing. A cross-site scripting vulnerability exists in Trix versions prior to 2.1.9 and prior to 1.3.3. The vulnerability stems from the susceptibility to cross-site scripting attacks when malicious code is pasted, which may result in...

PT-2024-13479 · Unknown · Welcome Email Editor

Name of the Vulnerable Software and Affected Versions: Welcome Email Editor versions through 5.0.6 Description: The issue is related to a Missing Authorization vulnerability in the Welcome Email Editor, which allows exploiting incorrectly configured access control security levels. Recommendations...

Malicious code in editor-devel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7aadc3203cf919f8f9db8494d53d7f655b0cc7b396989337e9ff334a971e4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11227 Malicious code in editor-devel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7aadc3203cf919f8f9db8494d53d7f655b0cc7b396989337e9ff334a971e4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Advanced Options Editor plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Advanced Options Editor versions = 1.0...

WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Ni WooCommerce Bulk Product Editor versions = 1.4.5...

SQL Injection

moodle/moodle is vulnerable to SQL injection. The vulnerability is due to insufficient input validation or sanitization in the XMLDB editor tool, which allows attackers to inject and execute unauthorized SQL commands...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-54675

CVE-2024-54675 affects MISP up to version 2.5.2, with a stored cross-site scripting (XSS) flaw in the editor interface (app/webroot/js/workflows-editor/workflows-editor.js) used for ad-hoc workflows. The root cause is a stored XSS vulnerability in the editor that can impact users who load the aff...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

MISP 安全漏洞

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP 2.5.2 and earlier versions,...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

gimp: PSD buffer overflow RCE

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSD file, possibly enabling the execution of unauthorized code within the GIMP process...

PT-2025-4098 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is a remote code execution vulnerability that exists in the parsing of U3D files within the PDF-XChange Editor. This vulnerability allows remote attackers to execute...

CVE-2024-11402

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through = 6.6.1...

CVE-2024-11402 WordPress Block Editor Bootstrap Blocks plugin <= 6.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through = 6.6.1...

CVE-2024-11402 WordPress Block Editor Bootstrap Blocks plugin <= 6.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through = 6.6.1...

CVE-2024-11402

CVE-2024-11402 corresponds to WordPress Block Editor Bootstrap Blocks plugin (

PT-2024-16961 · WordPress · Wp-Speedup Block Editor Bootstrap Blocks

Name of the Vulnerable Software and Affected Versions: WP-speedup Block Editor Bootstrap Blocks versions through 6.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This lets an...