CVE-2017-18538

The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes...

CVE-2017-18540

The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes...

Design/Logic Flaw

The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes...

Design/Logic Flaw

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes...

CVE-2019-15111

CVE-2019-15111 affects the WordPress plugin wp-front-end-profile before 0.2.2. The root cause is a permissions/ACL flaw in the plugin that lets an attacker modify a user profile via POST data, overwriting wp_capabilities and wp_user_level to escalate privileges to administrator. Some reports also...

CVE-2019-15110

CVE-2019-15110 affects the WordPress plugin wp-front-end-profile prior to 0.2.2. The vulnerability is cross-site scripting (XSS). Public exploit details (WP Front End Profile

CVE-2017-18539

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes...

CVE-2017-18538

The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes...

PT-2019-8473 · WordPress · Weblibrarian

Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.6 for WordPress Description: The issue concerns a Cross-Site Scripting XSS vulnerability. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website,...

PT-2019-8472 · Unknown · Weblibrarian

Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.5 Description: The issue concerns a problem with front-end short codes, allowing for XSS attacks. Recommendations: For versions prior to 3.4.8.5, update to version 3.4.8.5 or later to resolve the...

PT-2019-8474 · Unknown · Weblibrarian Plugin

Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.7 Description: The issue allows for cross-site scripting XSS attacks via front-end short codes. Recommendations: For versions prior to 3.4.8.7, update to version 3.4.8.7 or later to resolve the issu...

Input validation

The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input...

SQL injection vulnerability in the front-end am***.php page of S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front-end am.php page of S-CMS School Building System. Attackers can use the vulnerability...

Unauthorized Access Vulnerability in Shaanxi Cloud Enterprise CMS System

Ltd. currently has subsidiaries - Yulin Cloud Enterprise Media Co., Ltd. and Yulin Ali Zongchuang Information Technology Co. Shaanxi Cloud Enterprise CMS system has an unauthorized access vulnerability, attackers can use the vulnerability to directly front-end access to the administrator account...

GigToDo 1.3 - Cross-Site Scripting

GigToDo 1.3 - Cross-Site Scripting Exploit Title: GigToDo - Freelance Marketplace Script v1.3 Persistent XSS Injection Google Dork: - Date: 2019/07/28 Author: m0ze Vendor Homepage: https://www.gigtodoscript.com Software Link: https://codecanyon.net/item/gigtodo-freelance-marketplace-script/238553...

Shanghai Meicang Technology Information Development Co., Ltd. xss vulnerability exists in the frontend of build star

Ltd., is a cloud computing-based Internet application service provider. There is an xss vulnerability in the front-end of BuildStar, which can be exploited by attackers to inject arbitrary Web scripts or HTML...

FaceSentry Access Control System 6.4.8 Cleartext Password Storage

Summary FaceSentry 5AN is a revolutionary smart identity management appliance that offers entry via biometric face identification, contactless smart card, staff ID, or QR-code. The QR-code upgrade allows you to share an eKey with guests while you're away from your Office and monitor all activity...

CVE-2019-9056

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php, it is possible to reach an unserialize call with an untrusted FEU cookie, and achieve authenticated object injection...

Debian DLA-1750-1 : roundup security update

Hanno Bck was discovered that there was a cross-site scripting XSS vulnerability in the web front-end of the roundup issue- tracking system. For Debian 8 'Jessie', this issue has been fixed in roundup version 1.4.20-1.1+deb8u2. We recommend that you upgrade your roundup packages. NOTE: Tenable...

[SECURITY] [DLA 1750-1] roundup security update

Package : roundup Version : 1.4.20-1.1+deb8u2 CVE ID : CVE-2019-10904 Hanno Böck was discovered that there was a cross-site scripting XSS vulnerability in the web front-end of the roundup issue- tracking system. For Debian 8 "Jessie", this issue has been fixed in roundup version 1.4.20-1.1+deb8u2...