CVE-2023-40659

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

Cross site scripting

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

CVE-2023-40659

Affected product: Easy Quick Contact module for Joomla. Vulnerability: reflected XSS in the Easy Quick Contact module. Root cause: not explicitly detailed beyond a reflected XSS flaw. Impact (per sources): enables cross-site scripting in victims’ browsers; CVSS v3.1 base score 6.1 (MEDIUM) with N...

CVE-2023-40659: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

PT-2023-27581 · Joomla · Easy Quick Contact

Name of the Vulnerable Software and Affected Versions: Easy Quick Contact module for Joomla affected versions not specified Description: A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla. Recommendations: At the moment, there is no information about a newer...

Joomla Security Breach

Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that originates from a reflected cross-site scripting vulnerability in the Easy Quick Contact module...

Schneider Electric Easy UPS Online Monitoring Software Path Traversal Vulnerability

Schneider Electric Easy UPS Online Monitoring Software is a power monitoring software from Schneider Electric France. A path traversal vulnerability exists in Schneider Electric Easy UPS Online Monitoring Software. An attacker could exploit this vulnerability to cause arbitrary file deletion upon...

PT-2023-26618 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a vulnerability, but details are not provided. A tool is mentioned as being easy to use, and it creates something, but the specifics are not given. There is...

Schneider Electric Easy UPS Online Monitoring Software

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Vendor : Schneider Electric Equipment : Easy UPS Online Monitoring Software Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow elevation of privileges which could result in arbitrary...

PT-2023-7821 · Schneider Electric · Apc Easy Ups Online Monitoring

Name of the Vulnerable Software and Affected Versions: APC Easy UPS Online Monitoring Software affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could allow an...

easy-sewing.co.kr Cross Site Scripting vulnerability OBB-3806018

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 38 Update: rust-fedora-update-feedback-2.1.3-2.fc38

Provide feedback for Fedora updates inspired by fedora-easy-karma...

Sql injection

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2023-5108 Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2023-5108

CVE-2023-5108 affects the WordPress plugin “Easy Newsletter Signups” (versions up to 1.0.4). The root cause is improper sanitisation/escaping of a parameter used in a SQL statement, resulting in a SQL injection. The vulnerability is exploitable by high-privilege users such as admin, with the pote...

CVE-2023-5108: Improper Neutralization of Special Elements used in an SQL Command

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

PT-2023-31757

Name of the Vulnerable Software and Affected Versions The Easy Newsletter Signups WordPress plugin versions 1.0.0 through 1.0.4 Description The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection. This c...

WordPress plugin Easy Newsletter Signups security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

VulnCheck KEV: CVE-2023-23489

The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edddownloadsearch' action...

IBM i Security Vulnerabilities

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. IBM i has a security vulnerability that stems from easy access to sensitive information...