CVE-2025-22635

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in imithemes Eventer eventer allows Reflected XSS.This issue affects Eventer: from n/a through 3.9.9...

CVE-2025-22635

CVE-2025-22635 corresponds to a Reflected XSS in the WordPress Eventer (Event & Booking Manager) plugin. Public records indicate the vulnerability affects Eventer versions up to 3.9.9 (plugin

MAL-2024-9465 Malicious code in @galaxy-joy/loy.api.core (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @galaxy-joy/loy.api.core (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-47337

Missing Authorization vulnerability in Phillip Dane Joy Of Text Lite joy-of-text.This issue affects Joy Of Text Lite: from n/a through = 2.3.1...

CVE-2024-47337

CVE-2024-47337 affects the WordPress Joy Of Text Lite plugin up to version 2.3.1, with a Missing Authorization (Broken Access Control) flaw. The available details show low severity (CVSS 3.1/3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N; base 4.3) and unauthorized access risk, but no explicit e...

CVE-2024-47337 WordPress Joy Of Text Lite plugin <= 2.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Stuart Wilson Joy Of Text Lite.This issue affects Joy Of Text Lite: from n/a through 2.3.1...

CVE-2024-47337 WordPress Joy Of Text Lite plugin <= 2.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Phillip Dane Joy Of Text Lite joy-of-text.This issue affects Joy Of Text Lite: from n/a through = 2.3.1...

WordPress Joy Of Text Lite plugin <= 2.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Guru Raghav Saravanan Patchstack Alliance in WordPress Plugin Joy Of Text Lite versions = 2.3.1...

WordPress plugin Joy Of Text Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-32551 · WordPress · Stuart Wilson Joy Of Text Lite

Name of the Vulnerable Software and Affected Versions: Stuart Wilson Joy Of Text Lite versions 2.3.1 and earlier Description: A Missing Authorization issue is present in Stuart Wilson Joy Of Text Lite, allowing for unauthorized access. This issue impacts the plugin up to version 2.3.1 on WordPres...

dietandfitnesstoday.com Cross Site Scripting vulnerability OBB-3958002

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

maxconcept.com.hk Cross Site Scripting vulnerability OBB-3957984

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

joy-sailing.com Improper Access Control vulnerability OBB-3802160

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tiffany-joy-apartments.burgasbeach.com Cross Site Scripting vulnerability OBB-3773828

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-4099 Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi

The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection...

CVE-2022-4099 Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi

The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection...

WordPress plugin Joy Of Text Lite SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

PT-2023-13913 · WordPress · The Joy Of Text Lite

Name of the Vulnerable Software and Affected Versions: The Joy Of Text Lite WordPress plugin versions prior to 2.3.1 Description: The issue arises from the plugin's failure to properly sanitise and escape certain parameters before using them in SQL statements, which are accessible to...

Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi

The plugin does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection PoC Invoke the following curl command to induce a 5 second sleep: time curl...