PT-2021-11141

Name of the Vulnerable Software and Affected Versions: Booking Core - Ultimate Booking System version 1.7.0 Description: A Cross Site Scripting XSS issue exists, allowing potential exploitation through several fields and sections, including the "About Yourself” section under the “My Profile” page...

OPENSUSE-SU-2021:1043-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3546: Fix out-of-bounds write in virglcmdgetcapset bsc1185981 - CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device bsc1186010 - CVE-2021-3545: Fix information disclosure due to uninitialized...

WordPress Advance Menu Manager plugin <= 2.9.6 - Unauthorized Menu Edition via Cross-Site Request Forgery (CSRF) vulnerability

Unauthorized Menu Edition via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanteam in WordPress Advance Menu Manager plugin versions = 2.9.6. Solution Update the WordPress Advance Menu Manager plugin to the latest available version at least 3.0...

Advanced Menu Manager < 3.0 - Unauthorised Menu Edition via CSRF

The plugin does not properly check for CSRF in its ammsaveexistingmenu function, allowing attackers to make logged in high privilege users edit menus via a CSRF attack...

WordPress Advance Menu Manager plugin <= 3.0.1 - Unauthorized Menu Creation/Deletion vulnerability

Unauthorized Menu Creation/Deletion vulnerability discovered by WPScanTeam in WordPress Advance Menu Manager plugin versions = 3.0.1 Solution Update the WordPress Advance Menu Manager plugin to the latest available version at least 3.0.2...

Advanced Menu Manager < 3.0 - Unauthorised Menu Edition via CSRF

The plugin does not properly check for CSRF in its ammsaveexistingmenu function, allowing attackers to make logged in high privilege users edit menus via a CSRF attack PoC...

Cross Site Scripting (XSS)

lavalite/cms is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script via Menu Links feature...

LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-50080)

Lavalite is an open source content management system developed using the Laravel framework. A cross-site scripting vulnerability exists in LavaLite version 5.8.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "menu link" feature...

CVE-2020-23700

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

CVE-2020-23700

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

Cross site scripting

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

CVE-2020-23700

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

CVE-2020-23700

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

CVE-2020-23700

CVE-2020-23700 affects LavaLite-CMS 5.8.0, with a Cross-Site Scripting (XSS) vulnerability exposed via the Menu Links feature. The issue is documented across multiple feeds (NVD, Red Hat advisory, OSV, GHSA, CNVD, Veracode, etc.), consistently describing user-controllable script execution through...

LavaLite cross-site scripting vulnerabilities

Lavalite is an open source content management system developed using the Laravel framework. A cross-site scripting vulnerability exists in LavaLite version 5.8.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "menu link" feature...

PT-2021-10929

Name of the Vulnerable Software and Affected Versions LavaLite-CMS version 5.8.0 Description A Cross Site Scripting XSS issue exists, allowing potential exploitation via the Menu Links feature. Recommendations For LavaLite-CMS version 5.8.0, consider disabling the Menu Links feature until a patch...

CVE-2020-23700: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

CVE-2021-34190: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

EulerOS Virtualization 3.0.2.2 : grub2 (EulerOS-SA-2021-2126)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2. The rmmod implementation allows the unloading of a module used as a dependency without checking if any...

Unspecified vulnerability in Weidmueller Industrial WLAN devices

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A security vulnerability exists in Weidmueller Industrial WLAN devices, which can be exploited by an attacker to cause an escape from a restricted console via a specially crafted menu selection string, resulting ...