4334 matches found
PT-2025-4990 · Unknown · Notfound Youtube Video Grid
Name of the Vulnerable Software and Affected Versions: NotFound Youtube Video Grid versions 1.9 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an attacker can inject...
WordPress plugin Instant Appointment 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin WP-Polls SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
WordPress plugin REAL WordPress Sidebar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin Preloader Quotes 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin WordPress Local SEO SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WordPress...
PT-2025-1435 · Unknown · Synnefo Internet Management
Name of the Vulnerable Software and Affected Versions: Synnefo Internet Management Software versions 2023 and earlier Description: A SQL injection issue exists due to improper input validation in a specific API endpoint parameter, allowing an attacker to manipulate SQL queries via crafted input...
PT-2025-4969 · Unknown · Lampd Call To Action Popup
Name of the Vulnerable Software and Affected Versions: LamPD Call To Action Popup versions 1.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...
PrestaShop 跨站脚本漏洞
PrestaShop is an open source e-commerce solution from the US company PrestaShop. The solution provides multiple payment methods, short message alerts and product image zoom and other features. A cross-site scripting vulnerability exists in PrestaShop pscontactinfo version 3.3.2 and earlier...
WordPress plugin Tagesteller 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin wp-greet 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
Northern.tech CFEngine Enterprise 跨站脚本漏洞
Northern.tech CFEngine Enterprise is a versatile solution for automating routine tasks from Northern.tech. A security vulnerability exists in Northern.tech CFEngine Enterprise version 3.24.0 and versions 3.21.5 and earlier, which stems from a lack of input validation in certain fields, resulting ...
PT-2025-2824 · WordPress · Hero Mega Menu - Responsive Wordpress Menu Plugin
Name of the Vulnerable Software and Affected Versions: Hero Mega Menu - Responsive WordPress Menu Plugin versions 1.16.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an...
YesWiki 路径遍历漏洞
YesWiki is a wiki system written in PHP by the French organization YesWiki. It is used to create and manage websites in a collaborative manner. A path traversal vulnerability exists in YesWiki 4.4.5 and earlier versions, which stems from a file manager that allows an authenticated user to delete...
OBS Studio 代码问题漏洞
OBS Studio is an OBS Project open source software designed for efficiently capturing, compositing, encoding, recording and streaming video content. A code issue vulnerability exists in OBS Studio version 30.0.2 and prior versions, which stems from an untrusted search path issue caused by certain...
WeGIA 安全漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.0 that stems from vulnerability to SQL injection attacks via the query parameter in querygeracaoauto.php...
WordPress plugin Proofreading 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Moving Users plugin <= 1.05 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by omstaendlig in WordPress Plugin Moving Users versions = 1.05...
WordPress Book a Place plugin <= 0.7.1 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Muhamad Agil Fachrian in WordPress Plugin Book a Place versions = 0.7.1...