6645 matches found
WordPress plugin Devnex Addons For Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress plugin WP MathJax 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user input in the "overwriteip" parameter, allowing untrusted data JavaScript code to be stored and executed in the application without proper validation or escaping...
WordPress plugin WP Mailster 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...
WordPress plugin Fence URL 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...
PT-2024-38930 · Siempelkamp · Umweltoffice
Name of the Vulnerable Software and Affected Versions: Web Application affected versions not specified Description: A low privileged remote attacker can insert a SQL injection in the web application due to improper handling of HTTP request input data, which allows the exfiltration of all data. Th...
PT-2024-35840 · Unknown · Fintelligence Calculator
Name of the Vulnerable Software and Affected Versions: Fintelligence Calculator versions 1.0.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This occurs when the web pa...
USN-7117-2 needrestart regression
USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered that needrestart passed unsanitized data to a library libmodule-scandeps-perl which...
PT-2024-8874
Name of the Vulnerable Software and Affected Versions: Copilot Studio affected versions not specified Description: The issue is related to the improper neutralization of input during web page generation, also known as 'Cross-site Scripting', in Copilot Studio. This can allow an unauthorized...
ALPINE-CVE-2024-7882
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commerce: before 22.11.2024...
PT-2024-38616
Name of the Vulnerable Software and Affected Versions Firmanet Software ERP versions prior to 22.11.2024 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The vendor...
Smarttek Informatics Smart Doctor 跨站脚本漏洞
Smarttek Informatics Smart Doctor is an intelligent medical software from Smarttek Informatics, Inc. A cross-site scripting vulnerability exists in Smarttek Informatics Smart Doctor version 21.11.2024 and earlier, which stems from improper input neutralization during web page generation and is...
LLaMA-Factory 操作系统命令注入漏洞
LLaMA-Factory is a fine-tuned large-scale language model by a Chinese hoshi-hiyouga individual developer. A cross-site scripting vulnerability exists in LLaMA-Factory version 0.9.0 and earlier, which stems from improper handling of user input and allows malicious actors to execute arbitrary...
KION Exchange Programs Software 跨站脚本漏洞
KION Exchange Programs Software is a program exchange software from KION. A cross-site scripting vulnerability exists in KION Exchange Programs Software versions 21.11.2024 and earlier, which stems from reflective cross-site scripting due to improper input neutralization...
PT-2024-16963
Name of the Vulnerable Software and Affected Versions django CMS versions prior to 4.0 Description The issue is related to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS vulnerability. This allows for stored XSS attacks. The estimated number of...
CVE-2024-51938
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows DOM-Based XSS.This issue affects Charity Addon for Elementor: from n/a through = 1.3.2...
CVE-2024-51926
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsoul GreenCon greencon allows Stored XSS.This issue affects GreenCon: from n/a through = 1.0.1...
CVE-2024-51891
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SalesWizard.pl Official SalesWizard CRM Plugin official-saleswizard-crm allows Stored XSS.This issue affects Official SalesWizard CRM Plugin: from n/a through = 1.0.3...
CVE-2024-51823
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SherkSpear Add Ribbon Shortcode add-ribbon allows DOM-Based XSS.This issue affects Add Ribbon Shortcode: from n/a through = 1.0.1...