3262 matches found
CVE-2025-8073 Dynamic AJAX Product Filters for WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via name Parameter
The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-8073 Dynamic AJAX Product Filters for WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via name Parameter
The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-8073
The CVE-2025-8073 issue affects the Dynamic AJAX Product Filters for WooCommerce plugin for WordPress up to version 1.3.7, with a Stored XSS via the name parameter due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or higher...
PT-2025-35087
Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Online Shopping System Advanced version 1.0 Description: A reflected Cross-Site Scripting XSS vulnerability exists in the register.php file. Unsanitized user input in the f name parameter is reflected in the server response...
PT-2025-34970
Name of the Vulnerable Software and Affected Versions: Dynamic AJAX Product Filters for WooCommerce plugin versions prior to 1.3.8 Description: The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting via the name parameter due to...
CVE-2025-51971
A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the fname parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to injec...
PuneethReddyHc Online Shopping System Advanced 安全漏洞
PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A security vulnerability exists in PuneethReddyHc Online Shopping System Advanced version 1.0, which stems from the fname parameter not being cleane...
COMFAST CF-N1 安全漏洞
COMFAST CF-N1 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-N1 version 2.6.0, which originates from a command injection due to incorrect operation of the parameter interface/displayname in the file /usr/bin/webmgnt...
CVE-2025-9433
A vulnerability was found in mtons mblog up to 3.5.0. The impacted element is an unknown function of the file /admin/user/list of the component Admin Panel. Performing manipulation of the argument Name results in cross site scripting. The attack may be initiated remotely. The exploit has been mad...
CVE-2025-9433
A vulnerability was found in mtons mblog up to 3.5.0. The impacted element is an unknown function of the file /admin/user/list of the component Admin Panel. Performing manipulation of the argument Name results in cross site scripting. The attack may be initiated remotely. The exploit has been mad...
CVE-2025-9439 1000projects Online Project Report Submission and Evaluation System edit_faculty.php cross site scripting
A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this vulnerability is an unknown functionality of the file /rse/admin/editfaculty.php?id=2. This manipulation of the argument Name causes cross site scripting. The attack is...
CVE-2025-9433
CVE-2025-9433 affects mtons mblog up to version 3.5.0. The vulnerability is an XSS in the Admin Panel, specifically in the /admin/user/list function where manipulating the Name parameter can trigger cross-site scripting. Exploitation can be performed remotely, and public PoCs exist. Several conne...
1000 Projects Online Project Report Submission and Evaluation System Security Vulnerability
1000 Projects Online Project Report Submission and Evaluation System is 1000 Projects open source an online project report submission and evaluation system . 1000 Projects Online Project Report Submission and Evaluation System version 1.0 has a security vulnerability , the vulnerability stems fro...
CVE-2025-9409
CVE-2025-9409 affects lostvip-com ruoyi-go up to version 2.1. The vulnerability is in modules/system/controller/CommonController.go, DownloadTmp/DownloadUpload, where manipulating the fileName parameter enables a path traversal attack. It is exploitable remotely, with publicly released exploits. ...
CVE-2025-55605
Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter...
CVE-2025-55606
Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter...
CVE-2025-55522
Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...
CVE-2025-9356
A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function inboundFilterAdd of the file /goform/inboundFilterAdd. Executing manipulation of the argument ruleName can le...
CVE-2025-9356
CVE-2025-9356 affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 with firmware versions 1.0.013.001 through 1.2.07.001. The vulnerability is in the inboundFilterAdd function in /goform/inboundFilterAdd, where manipulating the ruleName argument can trigger a stack-based buffer overflow. The...