CloudExplorer Lite 安全漏洞

CloudExplorer Lite is CloudExplorer's platform that provides out-of-the-box basic functionality for cloud hosting management, cloud billing, operational analytics, and security compliance, as well as powerful extensibility to meet the customization needs of enterprises. A security vulnerability...

Fuji Electric TELLUS/TELLUS Lite Buffer Overflow Vulnerability

Fuji Electric TELLUS and Fuji Electric TELLUS Lite are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced features, user-friendliness and remote control.Fuji Electric TELLUS Lite is a remote control software. Fuji Electric TELLUS and Fuji Electric...

WordPress Plugin Image Map Pro–Drag-and-drop Builder for Interactive Images–Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite < 1.0.0 - Subscriber+ Stored XSS

The plugin does not sanitize and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks...

Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite < 1.0.0 - CSRF to Stored XSS

The plugin does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stored Cross-Site Scripting issue via a CSRF attack...

VulnCheck KEV: CVE-2023-2986

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the plugin. This allows unauthenticated...

CVE-2023-28418

Auth. subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Yudlee themes Mediciti Lite theme = 1.3.0 versions...

CVE-2023-28418

Auth. subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Yudlee themes Mediciti Lite theme = 1.3.0 versions...

Cross site scripting

Auth. subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Yudlee themes Mediciti Lite theme = 1.3.0 versions...

CVE-2023-30500

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPForms WPForms Lite wpforms-lite, WPForms WPForms Pro wpforms plugins = 1.8.1.2 versions...

CVE-2023-28418 WordPress Mediciti Lite Theme <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Auth. subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Yudlee themes Mediciti Lite theme = 1.3.0 versions...

CVE-2023-28418 WordPress Mediciti Lite Theme <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Auth. subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Yudlee themes Mediciti Lite theme = 1.3.0 versions...

CVE-2023-28418

CVE-2023-28418 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress theme Mediciti Lite by Yudlee, affecting versions

CVE-2023-30500

CVE-2023-30500 : Unauthenticated reflected XSS in WordPress WPForms Lite (wpforms-lite) and WPForms Pro (wpforms)

CVE-2019-25152

The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping...

CVE-2019-25152 Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting

The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping...

WordPress plugin Abandoned Cart Lite for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2023-21704 · Yudleethemes · Mediciti Lite

Name of the Vulnerable Software and Affected Versions: Yudlee themes Mediciti Lite theme versions 1.3.0 and earlier Description: A Reflected Cross-Site Scripting XSS vulnerability exists, allowing attackers to inject malicious scripts into the website. This issue affects authenticated users with...

WordPress theme Mediciti Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-11379 · Woocommerce · Abandoned Cart Pro For Woocommerce +1

Name of the Vulnerable Software and Affected Versions: Abandoned Cart Lite for WooCommerce versions up to, and including, 5.1.3 Abandoned Cart Pro for WooCommerce versions up to, and including, 7.12.0 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input...