Lucene search
K

3946 matches found

Cvelist
Cvelist
added 2025/05/19 2:45 p.m.13 views

CVE-2025-48258 WordPress Mega Menu Block plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jetmonsters Mega Menu Block getwid-megamenu allows Stored XSS.This issue affects Mega Menu Block: from n/a through = 1.0.6...

6.5CVSS0.00215EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 2:45 p.m.4 views

CVE-2025-48258 WordPress Mega Menu Block <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jetmonsters Mega Menu Block allows Stored XSS. This issue affects Mega Menu Block: from n/a through 1.0.6...

6.5CVSS6.4AI score0.00215EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.1 views

WordPress plugin Mega Menu Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS6AI score0.00215EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.5 views

PT-2025-21970 · Unknown · Jetmonsters Mega Menu Block

Name of the Vulnerable Software and Affected Versions: jetmonsters Mega Menu Block versions 1.0.0 through 1.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

6.5CVSS6.1AI score0.00215EPSS
Exploits0References4
OSV
OSV
added 2025/05/18 10:15 a.m.3 views

CVE-2025-4870

A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code of the file /admin/menusave.php. The manipulation of the argument menu leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00449EPSS
Exploits1References5
OSV
OSV
added 2025/05/18 10:15 a.m.3 views

CVE-2025-4869

A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/memberupdate.php. The manipulation of the argument menu leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS5.8AI score0.00415EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/18 12:0 a.m.1 views

itsourcecode Restaurant Management System 注入漏洞

itsourcecode Restaurant Management System is itsourcecode open source a restaurant management system . An injection vulnerability exists in version 1.0 of itsourcecode Restaurant Management System, which is caused by incorrect manipulation of the menu parameter in the file /admin/menusave.php,...

9.8CVSS7.8AI score0.00449EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/05/18 12:0 a.m.2 views

itsourcecode Restaurant Management System 注入漏洞

itsourcecode Restaurant Management System is itsourcecode open source a restaurant management system . An injection vulnerability exists in version 1.0 of itsourcecode Restaurant Management System, which is caused by incorrect manipulation of the menu parameter in the file /admin/memberupdate.php...

9.8CVSS7.8AI score0.00415EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.3 views

WordPress plugin Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.8CVSS4.6AI score0.00315EPSS
Exploits2References1
Fedora
Fedora
added 2025/05/11 1:16 a.m.20 views

[SECURITY] Fedora 42 Update: php-adodb-5.22.9-1.fc42

ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...

10CVSS9.7AI score0.00616EPSS
Exploits0
OSV
OSV
added 2025/05/10 4:15 p.m.1 views

CVE-2025-4506

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

9.8CVSS5.8AI score0.00415EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/10 4:0 p.m.6 views

CVE-2025-4506 Campcodes Online Food Ordering System menu-router.php sql injection

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS7.5AI score0.00415EPSS
Exploits1References5
CVE
CVE
added 2025/05/10 4:0 p.m.71 views

CVE-2025-4506

CVE-2025-4506 affects Campcodes Online Food Ordering System 1.0. The vulnerability is a SQL injection in the file /routers/menu-router.php, triggered by manipulating the argument 1_price. It is exposed remotely and has been publicly disclosed. Several connected sources corroborate the issue and t...

9.8CVSS7.5AI score0.00415EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/10 4:0 p.m.24 views

CVE-2025-4506 Campcodes Online Food Ordering System menu-router.php sql injection

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS0.00415EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/10 12:0 a.m.2 views

CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which originates from a SQL injection due to incorrect manipulation of parameter 1price in file...

9.8CVSS7.7AI score0.00415EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/05/10 12:0 a.m.3 views

PT-2025-20632 · Unknown · Campcodes Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Food Ordering System version 1.0 Description: A critical issue was found in the Campcodes Online Food Ordering System, affecting some unknown functionality of the file /routers/menu-router.php. The manipulation of the argumen...

9.8CVSS7.4AI score0.00415EPSS
Exploits1References12
RedhatCVE
RedhatCVE
added 2025/05/04 4:6 a.m.23 views

CVE-2025-3748

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.9AI score0.00222EPSS
Exploits0References1
OSV
OSV
added 2025/05/02 4:15 a.m.2 views

CVE-2025-3748

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score0.00222EPSS
Exploits0References4
NVD
NVD
added 2025/05/02 4:15 a.m.20 views

CVE-2025-3748

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00222EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/05/02 3:21 a.m.14 views

CVE-2025-3748 Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00222EPSS
Exploits0References4
Rows per page
Query Builder