717 matches found
MAL-2025-41881 Malicious code in @espace-client-axafr/popin-footer (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @espace-client-axafr/popin-footer (npm)
The package communicates with a domain associated with malicious activity...
CVE-2024-39923
An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting XSS due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in...
CVE-2024-39923
An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting XSS due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in...
Mahara 安全漏洞
Mahara is a free and open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara versions prior to 24.04.2 and prior to 23.04.7, which stems from an uncleaned About, Contact, and Help footer link values that could lead to a cross-site scripting attack...
CVE-2024-39923
An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting XSS due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in...
PT-2025-34609 · Mahara · Mahara
Name of the Vulnerable Software and Affected Versions: Mahara versions 23.04 through 23.04.7 Mahara versions 24.04 through 24.04.2 Description: An issue exists in Mahara where the About, Contact, and Help footer links are susceptible to Cross Site Scripting XSS due to insufficient input...
CVE-2024-39923
An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting XSS due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in...
CVE-2024-39923
CVE-2024-39923 affects Mahara, specifically versions Mahara 23.04 before 23.04.7 and 24.04 before 24.04.2. The issue stems from the About, Contact, and Help footer links not being sanitised, allowing cross-site scripting (XSS). The links are configurable by an administrator but are clickable by a...
PT-2025-44092
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc1-syzkaller-00211-g90d970cade8e Description The Linux kernel's f2fs filesystem contained a flaw where a non-inode dnode could have the same footer information as an inode. This could lead to an incorrect...
CVE-2025-51990
XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting XSS vulnerabilities in the Administration interface, specifically under the Presentation section of the Global Preferences panel. An authenticated administrator can inject arbitrary JavaScript payloads into the HTTP...
PT-2025-51727
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's f2fs file system related to the detection of potentially corrupted node IDs nid within the free nid list. Specifically, the issue involves a scenario...
CVE-2025-51990
XWiki 17.3.0 and earlier are affected by stored XSS in the Administration interface (Presentation section of Global Preferences). An authenticated administrator can inject JavaScript into the HTTP Meta Info, Footer Copyright, and Footer Version fields; these payloads are stored and rendered witho...
CVE-2025-51990
XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting XSS vulnerabilities in the Administration interface, specifically under the Presentation section of the Global Preferences panel. An authenticated administrator can inject arbitrary JavaScript payloads into the HTTP...
MAL-2025-9289 Malicious code in @sellerly/sellzone-semrush2-header-footer (npm)
The package @sellerly/sellzone-semrush2-header-footer was found to contain malicious code...
Malicious code in finnlet-footer (npm)
The package finnlet-footer was found to contain malicious code...
Malicious code in desktop-footer (npm)
The package desktop-footer was found to contain malicious code...
Malicious code in haraka-plugin-footer (npm)
The package haraka-plugin-footer was found to contain malicious code...