Pimcore Cross-Site Scripting Vulnerability (CNVD-2023-05411)

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications. cross-site scripting vulnerabilities exist...

silverstripe framework 跨站脚本漏洞

silverstripe framework is a CMS web framework. A cross-site scripting vulnerability exists in silverstripe framework versions 3.0.0 and later and 4.11.1 and earlier, which stems from a lack of effective filtering and escaping of user-supplied data and can be exploited by an attacker to execute...

WordPress plugin Name Directory 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Name Directory versions prior to 1.25.4 are vulnerable to cross-site request forgery, which...

JFinal SQL注入漏洞

JFinal is a Java-based open source framework for WEB + ORM . JFinal CMS v2.0 version of the SQL injection vulnerability , the vulnerability stems from the lack of article management function for SQL data filtering and escaping...