@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.9.0-rc.0) +17 more potentially affected by CVE-2024-51434 via froala-editor (>=4.0.0, <=4.2.2)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =26.2.3, =26.2.3, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.2.2 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2024-51434 Source advisory: OSV:GHSA-549P-5C7F-C5P4...

GHSA-549P-5C7F-C5P4 Froala WYSIWYG editor allows cross-site scripting (XSS)

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

Froala WYSIWYG editor allows cross-site scripting (XSS)

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2024-2918)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor.double-free in dialogchanged in Vim v9.1.0648.When abandoning a buffer, Vim may ask the user what to d...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2024-2841)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2024-2823)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2024-2898)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor.double-free in dialogchanged in Vim v9.1.0648.When abandoning a buffer, Vim may ask the user what to d...

Moodle vulnerable to site administration SQL injection via XMLDB editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

GHSA-MX26-62XM-2P83 Moodle vulnerable to site administration SQL injection via XMLDB editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

SQL Injection

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to SQL Injection through the XMLDB editor tool. An attacker with administrative privileges can manipulate database queries and potentially access or modify data without proper authorization by injectin...

CVE-2024-43436

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

UBUNTU-CVE-2024-43436

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

CVE-2024-43436

CVE-2024-43436 affects Moodle and is caused by a SQL injection risk in the XMLDB editor tool available to site administrators. Public sources in the connected documents describe that the vulnerability stems from insufficient validation of externally entered SQL statements within the XMLDB editor,...

CVE-2024-43436 Moodle: site administration sql injection via xmldb editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

CVE-2024-43436 Moodle: site administration sql injection via xmldb editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

CVE-2024-43436 Moodle: site administration sql injection via xmldb editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

Moodle 安全漏洞

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements i...

PT-2024-34634 · Froala · Froala Wysiwyg Editor

Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG editor versions 4.3.0 and earlier Description: The issue is related to inconsistent parsing of the tag, which allows for cross-site scripting XSS in the Froala WYSIWYG editor. Recommendations: For versions 4.3.0 and earlier,...

Froala Editor 安全漏洞

Froala Editor is a powerful JavaScript rich text editor from Froala. A security vulnerability exists in Froala Editor version 4.3.0 and earlier, which stems from the presence of inconsistent plaintext token parsing, resulting in susceptibility to cross-site scripting vulnerabilities...

CVE-2024-7879

The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...