Celk Sistemas Celk Saude security vulnerabilities

Celk Sistemas Celk Saude is a health sector management software from Celk Sistemas, Brazil. A security vulnerability exists in Celk Sistemas Celk Saude version 3.1.252.1, which stems from improper validation or cleanup of erro parameters, resulting in vulnerability to injection attacks...

CVE-2024-51182

The health sector management software Celk Sistemas Celk Saude v.3.1.252.1 is vulnerable to an HTML Injection vulnerability (CWE-79). A remote attacker can inject arbitrary HTML code via the "erro" parameter , potentially allowing them to manipulate webpage content. As of the latest reports, no p...

native-php-cms security vulnerabilities

native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in version 1.0 of native-php-cms, which stems from improper manipulation of the message/error parameter in the file /fladmin/jump.php, and is susceptible to cross-site scripting attacks...

WordPress SEO Keywords plugin <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter vulnerability

Reflected Cross-Site Scripting via googleerror Parameter vulnerability discovered by vgo0 in WordPress Plugin seo-keywords versions = 1.1.3...

CVE-2024-11378: Improper Neutralization of Input During Web Page Generation

The Bizapp for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'error' parameter in all versions up to, and including, 2.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

PT-2025-1758 · WordPress · Seo Keywords

Name of the Vulnerable Software and Affected Versions: SEO Keywords plugin for WordPress versions up to and including 1.1.3 Description: The issue is related to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in pages through...

PT-2024-17262 · WordPress · Pkt1 Centro De Envios

Name of the Vulnerable Software and Affected Versions: PKT1 Centro de envios plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

CVE-2024-11806: Improper Neutralization of Input During Web Page Generation

The PKT1 Centro de envios plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'success' and 'error' parameters in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

Smart4Web security vulnerabilities

Smart4Web is a content management system from Smart4Web, Inc. A security vulnerability exists in versions prior to Smart4Web v.5.020241004. A remote attacker can exploit this vulnerability to execute arbitrary code via the error parameter in the URL...

PT-2024-34411 · Unknown · M2000 Smart4Web

Name of the Vulnerable Software and Affected Versions: M2000 Smart4Web versions prior to 5.020241004 Description: The issue allows a remote attacker to execute arbitrary code via the error parameter in the URL. This is a Cross Site Scripting vulnerability, which can lead to the execution of...

CVE-2024-50800: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error parameter in URL...

CVE-2024-44796

A cross-site scripting XSS vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the errordescription parameter...

CVE-2024-41241

A Reflected Cross Site Scripting XSS vulnerability was found in " /smsa/adminlogin.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-41241

A Reflected Cross Site Scripting XSS vulnerability was found in " /smsa/adminlogin.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-41242

A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-41240

A Reflected Cross Site Scripting XSS vulnerability was found in " /smsa/teacherlogin.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via the "error" parameter...

PT-2024-29320 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: A Reflected Cross Site Scripting XSS issue was discovered in the /smsa/student login.php endpoint, allowing remote attackers to execute arbitrary code via the error...

PT-2024-29318

Name of the Vulnerable Software and Affected Versions Kashipara Responsive School Management System version 3.2.0 Description A Reflected Cross Site Scripting XSS issue was found in the "/smsa/teacher login.php" endpoint, allowing remote attackers to execute arbitrary code via the error parameter...

CVE-2024-41242

A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-41242: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...