Wordpress Plugin Timeline Calendar SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. Wordpress Plugin Timeline Calendar A SQL...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is released. These vulnerabilities allow attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to gain...

CVE-2021-24519

The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the 'Text Next to Icon' field when adding or editing a Characteristic, allowing high privilege users such as admin to use XSS payload in it, leading to an authenticated Stored Cross-Site Scripting issue...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

Cross site scripting

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

UBUNTU-CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

CVE-2021-38602

CVE-2021-38602 concerns PluXML 5.8.7, where Article Editing via Headline or Content allows stored XSS. The cited description explicitly states a stored XSS in PluXML 5.8.7, and the connected documents reinforce that this is tied to the same vulnerability tracked across multiple sources. The CVE r...

CVE-2021-38602

Removed by vendor...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

Exploit for Cross-site Scripting in Pluxml

CVE-2021-38602 A stored cross site scripting vulnerability is...

PT-2021-31146

The Drupal project uses the CKEditor, library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to allow use of the CKEditor library for WYSIWYG editing. An attacker that can create or edit content even without...

PluXml 跨站脚本漏洞

PluXml is a free and open source content management system that does not require a database to work. A cross-site scripting vulnerability exists in PluXML, which stems from a stored XSS vulnerability that the Article Editing feature of PluXML 5.8.7 allows to be implemented via headers or content...

CVE-2021-38602: Improper Neutralization of Input During Web Page Generation

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

CVE-2020-22392

Cross Site Scripting XSS vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file...

CVE-2020-22392

Cross Site Scripting XSS vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file...

CVE-2020-22392

CVE-2020-22392 corresponds to a Cross Site Scripting (XSS) vulnerability in Subrion CMS 4.2.2, specifically exposed when adding a blog and then editing an image file. The connected documents confirm the affected product/version and the vulnerable action, but do not provide technical details about...

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plug-ins and more. A security vulnerability exists in Subrion CMS that stems from a cross-site scripting vulnerability when adding a blog...