7902 matches found
CVE-2024-49605 WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...
CVE-2024-47485
There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...
CVE-2024-47486
There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...
CVE-2024-47485
There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...
CVE-2024-47486
There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...
CVE-2024-47486
There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...
CVE-2024-47486
CVE-2024-47486 affects Hikvision HikCentral Master Lite with an XSS vulnerability that enables an attacker to inject scripts into certain pages by submitting malicious data. The initial description notes XSS in some HikCentral Master Lite versions; connected sources corroborate the issue but do n...
CVE-2024-47486
There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...
CVE-2024-47485
There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...
CVE-2024-47485
There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...
Hikvision HikCentral Master Lite 安全漏洞
Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for the edge domain from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite, which stems from a CSV injection vulnerability that could allow an attacker to build...
Hikvision HikCentral Master Lite 安全漏洞
Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for edge domains from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite, which stems from a cross-site scripting XSS vulnerability that allows an attacker to inje...
CVE-2024-49277
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows Stored XSS.This issue affects UltraAddons Elementor Lite: from n/a through = 2.0.2...
CVE-2024-49277
CVE-2024-49277 denotes a Stored XSS in UltraAddons Elementor Lite (WordPress)
WordPress plugin UltraAddons Elementor Lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-33416 · Ultraaddons · Ultraaddons Elementor Lite
Name of the Vulnerable Software and Affected Versions: UltraAddons Elementor Lite versions 1.1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendation...
CVE-2012-10018
The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesti...
CVE-2012-10018 Mapplic Lite and Mapplic <= (Various Versions) - Server Side Request Forgery to Cross-Site Scirpting
The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesti...
CVE-2012-10018
The CVE-2012-10018 issue affects WordPress plugins Mapplic (up to 6.1) and Mapplic Lite (up to 1.0). The connected data confirms a Server-Side Request Forgery that can lead to Stored/XSS via SVG files. Nuclei details specify that an authenticated user with author-level permissions can inject remo...
WordPress plugin Mapplic and Mapplic Lite 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...