WordPress Plugin LearnPress Export Import SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin LearnPress Export Import suffers from...

PT-2024-23992 · Mailmunch · Mailmunch

Name of the Vulnerable Software and Affected Versions: MailMunch – Grow your Email List versions 3.1.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. This allows for stored XSS attacks...

The vulnerability of the Grafana monitoring and observation platform lies in the improper handling of input during the creation of a web page. This allows a hacker to inject the entered URL address into the system.

The vulnerability of the Grafana monitoring and observation platform lies in the creation of snapshots and the arbitrary selection of the “originalUrl” parameter, thereby modifying the query through web proxies. Exploiting this vulnerability allows a malicious actor to inject the entered URL...

The vulnerability of the Grafana monitoring and observation platform lies in the improper handling of input during the creation of web pages. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Grafana monitoring and observation platform is related to the presence of SVG files that were not properly cleaned, allowing arbitrary JavaScript to execute in the context of the current authorized Grafana instance user. Exploiting this vulnerability could enable a...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to improper input cancellation during page creation, allows a violator to carry out cross-site scripting attacks.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the possibility of exploiting XSS attacks in the partial block function. Exploiting this vulnerability could allow a malicious actor, operating remotely, to carry out cross-site scripting attacks...

WordPress Plugin Announce from the Dashboard 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

The vulnerability in the virtual training environment Moodle, related to improper input neutralization during the creation of web pages, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of additional filtering for Wiki comments. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

Cross Site Scripting (XSS)

francoisjacquet/rosariosis is vulnerable to Cross Site Scripting. The vulnerability is due to improper handling of input in the component Add Portal Note, leading to the execution of arbitrary JavaScript code...

WordPress plugin Genesis Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, related to the lack of security measures for website structure protection, allows attackers to access and delete arbitrary files.

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity in JetBrains is related to improper verification of data consistency during input processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to delete a...

CVE-2024-30530

Technical details about CVE-2024-30530 are not provided in the supplied documents. The initial description states a Stored XSS in Sonaar MP3 Player plugin but no product/version/root-cause/impact/fix details are present here. Monitor for updates.

CVE-2024-30558

Technical details about CVE-2024-30558 are not publicly available in the provided connected documents. Based on available data, we cannot specify affected product/version or remediation here. Monitor for updates from vendors/security advisories.

PT-2024-23477 · Unknown · Underconstruction

Name of the Vulnerable Software and Affected Versions: underConstruction versions n/a through 1.21 Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. This allows for stored XSS attacks. Recommendations: For version...

PT-2024-23791 · Unknown · User Rights Access Manager

Name of the Vulnerable Software and Affected Versions: User Rights Access Manager versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations...

PT-2024-23782 · Unknown · Convert Post Types

Name of the Vulnerable Software and Affected Versions: Convert Post Types versions 1.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting XSS, specifically Reflected XSS. Recommendations: For Convert...

PT-2024-23792 · Webdorado · Webdorado Spiderfaq

Name of the Vulnerable Software and Affected Versions: WebDorado SpiderFAQ versions 1.3.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. This allows for Reflected XSS attacks...

CVE-2024-30519

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lordicon Lordicon Animated Icons allows Stored XSS.This issue affects Lordicon Animated Icons: from n/a through 2.0.1...

CVE-2024-30483

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simple Sponsorships Sponsors allows Stored XSS.This issue affects Sponsors: from n/a through 3.5.1...

Algoritimk E-commerce Software 跨站脚本漏洞

Algoritimk E-commerce Software is an e-commerce platform software from Algoritimk. A cross-site scripting vulnerability exists in Algoritimk E-commerce Software versions prior to 3.9.2, which stems from improper neutralization of user input...

PT-2024-23377 · Unknown · Booking Activities

Name of the Vulnerable Software and Affected Versions: Booking Activities versions 1.15.19 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...