CVE-2019-12950

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...

WordPress Eventin 4.0.26 Privilege Escalation

WordPress Eventin plugin versions 4.0.26 and below suffers from an unauthenticated privilege escalation vulnerability due to a missing authorization check in the importitems function...

PT-2025-11241

Name of the Vulnerable Software and Affected Versions Industrial theme for WordPress versions up to, and including, 1.7.8 Description The Industrial theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on th...

Cross site scripting

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...

CVE-2019-12950

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...

CVE-2019-12950: Improper Neutralization of Input During Web Page Generation

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...

PT-2019-13048

Name of the Vulnerable Software and Affected Versions TeamPass version 2.1.27.35 Description An issue was discovered in the "Import items" feature of the sources/items.queries.php file, allowing an attacker to load a crafted CSV file with an XSS payload. Recommendations For TeamPass version...