PT-2024-38277 · Baidu · Baidu Ueditor

Name of the Vulnerable Software and Affected Versions: Baidu UEditor version 1.4.2 Description: A vulnerability was found in the file /ueditor142/php/controller.php?action=catchimage, where the manipulation of the argument source leads to cross site scripting. The attack can be initiated remotely...

The vulnerability of the lib-src/etags.c file in the ctags text editor EMACS allows a hacker to execute arbitrary code.

The vulnerability of the lib-src/etags.c file in the ctags text editor EMACS is related to the improper elimination of special elements. Exploiting this vulnerability may allow an attacker to execute arbitrary code...

WordPress Slider by 10Web plugin < 1.2.57 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Slider by 10Web versions 1.2.57...

Cross-Site Scripting (XSS)

typo3/cms is vulnerable to Cross-Site Scripting XSS.The vulnerability is caused due to improper encoding of editor input, allowing authenticated editors to inject arbitrary HTML...

WordPress Zephyr Project Manager plugin < 3.3.99 - Editor+ stored XSS vulnerability

Editor+ stored XSS vulnerability discovered by Adrian Peña Barragan in WordPress Plugin Zephyr Project Manager versions 3.3.99...

Mp3tag 代码问题漏洞

Mp3tag is a metadata tag editor from Mp3tag, Inc. A code issue vulnerability exists in Mp3tag 3.26d and prior versions, which stems from unknown code in the component DLL Handler that can lead to uncontrolled search paths...

VulnCheck KEV: CVE-2022-24665

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts...

VulnCheck KEV: CVE-2022-24664

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts...

The vulnerability of Adobe Dreamweaver’s HTML editor arises from the lack of measures taken to eliminate special elements used in the operating system command line. This allows attackers to execute arbitrary code.

The vulnerability of Adobe Dreamweaver exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a perpetrator to execute arbitrary code by sending a specially created malicious file...

CVE-2024-6948

A vulnerability classified as critical has been found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected is an unknown function of the file /slideeditor.php of the component Slide Editor. The manipulation of the argument newSlideFile leads to unrestricted upload. It is possib...

CVE-2024-6948

A vulnerability classified as critical has been found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected is an unknown function of the file /slideeditor.php of the component Slide Editor. The manipulation of the argument newSlideFile leads to unrestricted upload. It is possib...

CVE-2024-6948

CVE-2024-6948 affects Gargaj wuhu Slide Editor, specifically the /slideeditor.php file. The vulnerability stems from manipulating the newSlideFile argument, causing unrestricted upload, which can be exploited remotely. Several connected sources confirm the issue but do not provide concrete produc...

CVE-2024-6948 Gargaj wuhu Slide Editor slideeditor.php unrestricted upload

A vulnerability classified as critical has been found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected is an unknown function of the file /slideeditor.php of the component Slide Editor. The manipulation of the argument newSlideFile leads to unrestricted upload. It is possib...

CVE-2024-6948 Gargaj wuhu Slide Editor slideeditor.php unrestricted upload

A vulnerability classified as critical has been found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected is an unknown function of the file /slideeditor.php of the component Slide Editor. The manipulation of the argument newSlideFile leads to unrestricted upload. It is possib...

CVE-2024-37523

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AMP-MODE Login Logo Editor allows Stored XSS.This issue affects Login Logo Editor: from n/a through 1.3.3...

CVE-2024-37523 WordPress Login Logo Editor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AMP-MODE Login Logo Editor allows Stored XSS.This issue affects Login Logo Editor: from n/a through 1.3.3...

CVE-2024-37523

The CVE-2024-37523 issue targets the AMP-MODE Login Logo Editor with Stored XSS due to improper input handling. Affected: Login Logo Editor versions up to 1.3.3. Root cause: improper neutralization of input during web page generation. Exploitation specifics are not provided in the core documents;...

PT-2024-27628 · Unknown · Amp-Mode Login Logo Editor

Name of the Vulnerable Software and Affected Versions: AMP-MODE Login Logo Editor versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in the AMP-MODE Login...

PT-2024-37987 · Gargaj · Gargaj

Name of the Vulnerable Software and Affected Versions: Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120 Description: A critical vulnerability has been found in the Slide Editor component of the affected software, specifically in the /slideeditor.php file. The issue arises from the...

CVE-2024-6848

The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 1.26.6 due to insufficient input sanitization and output escaping affecting the boldgridcanvasimage AJAX...