CVE-2021-24560

The Software License Manager WordPress plugin before 4.4.8 does not sanitise or escape the editrecord parameter before outputting it back in the page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24560

The Software License Manager WordPress plugin before 4.4.8 does not sanitise or escape the editrecord parameter before outputting it back in the page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24560 Software License Manager < 4.4.8 - Reflected Cross-Site Scripting

The Software License Manager WordPress plugin before 4.4.8 does not sanitise or escape the editrecord parameter before outputting it back in the page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24560

CVE-2021-24560 affects the WordPress plugin Software License Manager up to version 4.4.8. The issue is a Reflected Cross-Site Scripting vulnerability caused by insufficient sanitization/escaping of the edit_record parameter when outputting content in the admin dashboard. Affected component: the p...

PT-2021-16079

Name of the Vulnerable Software and Affected Versions Software License Manager versions prior to 4.4.8 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the edit record parameter is not properly sanitized or escaped before being outputted back in the...

Software License Manager < 4.5.1 - Arbitrary Domain Deletion via CSRF

The delreistereddomains AJAX action of the plugin does not have any CSRF checks, and is vulnerable to a CSRF attack PoC https://example.com/wp-admin/admin-ajax.php?action=delreistereddomain=1...

Software License Manager < 4.5.1 - Arbitrary Domain Deletion via CSRF

The delreistereddomains AJAX action of the plugin does not have any CSRF checks, and is vulnerable to a CSRF attack https://example.com/wp-admin/admin-ajax.php?action=delreistereddomain&id=1...

CVE-2021-24560: Improper Neutralization of Input During Web Page Generation

The Software License Manager WordPress plugin before 4.4.8 does not sanitise or escape the editrecord parameter before outputting it back in the page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Software License Manager, which stems fr...

Software License Manager < 4.5.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise or escape its License Key Prefix setting before outputting it in the Add/Edit Licenses page, leading to an Authenticated Stored Cross-Site Scripting issue PoC Go the plugin’s settings and add " as a License Key Prefix Then go the the Add/Edit Licenses page to trigger...

Software License Manager < 4.5.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise or escape its License Key Prefix setting before outputting it in the Add/Edit Licenses page, leading to an Authenticated Stored Cross-Site Scripting issue Go the plugin’s settings and add "alert/XSS/ as a License Key Prefix Then go the the Add/Edit Licenses page to...

Siemens Automation License Manager 5.x < 6.0.9 DoS (SSA-158827)

Binary data scadasiemensalmssa158827.nbin...

Software License Manager < 4.4.8 - Reflected Cross-Site Scripting

The plugin does not sanitise or escape the editrecord parameter before outputting it back in the page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue PoC...

Siemens Automation License Manager Denial of Service Vulnerability (CNVD-2021-61126)

Siemens Automation License Manager centrally manages license keys for various Siemens software products. A denial of service vulnerability exists in Siemens Automation License Manager because sending carefully crafted packets to port 4410/tcp on an affected system could consume a large amount of...

WordPress Software License Manager plugin <= 4.4.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by iohex in WordPress Software License Manager plugin versions = 4.4.7. Solution Update the WordPress Software License Manager plugin to the latest available version at least 4.4.8...

Software License Manager < 4.4.8 - Reflected Cross-Site Scripting

The plugin does not sanitise or escape the editrecord parameter before outputting it back in the page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-25659

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...

CVE-2021-25659

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...

CVE-2021-25659

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...

Design/Logic Flaw

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...