4 matches found
EUVD-2025-198126
The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.10.0. This is due to the plugin not properly verifying that a user is authorized to perform actions on the REST API /wp-json/yith/wishlist/v1/lists endpoint which uses...
Scada-LTS XSS
The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection for the structure of the web page when processing parameters for the end-point mailinglists.shtm. Exploiting this vulnerability allows a remote attacker to perform cross-site...
Cross-site Scripting (XSS)
Overview microweber/microweber is a new generation CMS with drag and drop. Affected versions of this package are vulnerable to Cross-site Scripting XSS by an admin user who injects a malicious script into the "List name" field of a new campaign at the /admin/modules/newsletter/lists endpoint. The...
