CVE-2022-0728: Improper Neutralization of Input During Web Page Generation

The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress Easy Social Icons plugin SQL injection vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Easy Social Icons plugin has a SQL injection...

CVE-2021-38834

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

CVE-2021-38834

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

CVE-2021-38834

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

Code injection

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

CVE-2021-38834

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

CVE-2021-38834

CVE-2021-38834 affects easy-mock versions 1.5.0 through 1.6.0, where remote attackers can bypass the vm2 sandbox and execute arbitrary system commands via specially crafted JavaScript code. This mode of exploitation is described in the vulnerability descriptions and referenced by an exploit entry...

CVE-2021-38834: Undefined Security Weakness

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

easy-mock 安全漏洞

easy-mock is a persistence service. It can quickly generate simulated data and provide visual views. A security vulnerability exists in easy-mock versions 1.5.0 through 1.6.0, which can be exploited by remote attackers to bypass the vm2 sandbox and execute arbitrary system commands via specially...

PT-2022-10784

Name of the Vulnerable Software and Affected Versions easy-mock versions 1.5.0 through 1.6.0 Description The issue allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code. Recommendations For easy-mock versions 1.5.0 through 1.6.0, consider...

CVE-2022-0887

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selectedicons attribute to the cnsswidget before using it in an SQL statement, leading to a SQL injection vulnerability...

CVE-2022-0887

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selectedicons attribute to the cnsswidget before using it in an SQL statement, leading to a SQL injection vulnerability...

CVE-2022-0887

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selectedicons attribute to the cnsswidget before using it in an SQL statement, leading to a SQL injection vulnerability...

Sql injection

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selectedicons attribute to the cnsswidget before using it in an SQL statement, leading to a SQL injection vulnerability...

CVE-2022-0887

CVE-2022-0887 affects the WordPress Easy Social Icons plugin (versions before 3.1.4). The vulnerability is a SQL injection caused by insufficient sanitization of the selected_icons attribute sent to the cnss_widget, which is used in SQL statements. Impact is a SQL injection in the affected widget...

CVE-2022-0887 Easy Social Icons < 3.1.4 - Admin+ SQL Injection

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selectedicons attribute to the cnsswidget before using it in an SQL statement, leading to a SQL injection vulnerability...

PT-2022-13502

Name of the Vulnerable Software and Affected Versions Easy Social Icons WordPress plugin versions prior to 3.1.4 Description The issue arises from the lack of sanitization of the selected icons attribute in the cnss widget before it is used in an SQL statement, leading to a SQL injection...

CVE-2022-0887: Improper Neutralization of Special Elements used in an SQL Command

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selectedicons attribute to the cnsswidget before using it in an SQL statement, leading to a SQL injection vulnerability...

WordPress plugin Easy Social Icons SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Easy Social Icons plugin has a SQL injection...