79 matches found
CVEs
CVE 列表 CVE-2024-22890: My e-Diary App - 跨站脚本攻击 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - 跨站脚本攻击 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md CVE-2024-24134 : Online Food Menu - 跨站脚本攻击 概念验证PoC :...
CVE-2024-24134
CVE-2024-24134：在线食品菜单 - 跨站脚本攻击 概念验证PoC：https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24134.md 概念验证PoC：https://github.com/BurakSevben/CVE-2024-24134/blob/main/CVE-2024-24134.md...
WordPress TLP Food Menu plugin < 6.0.2 - Unauthenticated Reservation Status Modification vulnerability
Unauthenticated Reservation Status Modification vulnerability discovered by Vaibhav Narkhede in WordPress Plugin Food Menu – Restaurant Menu & Online Ordering for WooCommerce versions 6.0.2...
CVE-2026-13328
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...
CVE-2026-13328
The Food Menu WordPress plugin (versions before 6.0.2 ) is vulnerable to an unauthenticated reservation status modification flaw. The plugin fails to perform necessary capability or ownership checks on its reservation-status update action. Because this action is exposed to unauthenticated users a...
CVE-2026-13328 TLP Food Menu < 6.0.2 - Unauthenticated Reservation Status Modification
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...
CVE-2026-13328
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...
EUVD-2026-57724
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...
PT-2026-71389
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...
CVE-2026-13328: Improper Access Control
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...
EUVD-2025-2040
Malicious code in bioql PyPI...
EUVD-2025-16954
Malicious code in bioql PyPI...
EUVD-2024-51587
Malicious code in bioql PyPI...
EUVD-2024-49263
Malicious code in bioql PyPI...
EUVD-2025-18509
Malicious code in bioql PyPI...
EUVD-2025-19323
Malicious code in bioql PyPI...
WordPress Plugin Advance Food Menu Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Advance Food Menu has a cross-site scripting vulnerability, the vulnerability stems fro...
CVE-2025-48323
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abunaser Khan Advance Food Menu advance-food-menu allows Stored XSS.This issue affects Advance Food Menu: from n/a through = 1.0...
CVE-2025-48323
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abunaser Khan Advance Food Menu advance-food-menu allows Stored XSS.This issue affects Advance Food Menu: from n/a through = 1.0...
CVE-2025-48323 WordPress Advance Food Menu plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abunaser Khan Advance Food Menu advance-food-menu allows Stored XSS.This issue affects Advance Food Menu: from n/a through = 1.0...