WordPress Show notice or message on admin area plugin <= 2.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Show notice or message on admin area versions = 2.0...

CGA-X8CQ-9Q75-4HGQ

Bulletin has no description...

CVE-2025-23987

creationtimestamp| type| source ---|---|--- 2025-01-31 09:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo22vtyo2b 2025-01-31 10:15:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3638 2025-01-31 11:11:47+00:00| seen| https://t.me/cvedetector/16920...

Ubuntu: Security Advisory (USN-7236-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-24136

creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxudu3pv2e...

WordPress NOTICE BOARD BY TOWKIR plugin <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin NOTICE BOARD BY TOWKIR versions = 3.1...

CVE-2025-23752

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabcdvze2t...

Fedora: Security Advisory (FEDORA-2025-69207650a4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Itechscripts School Management Software 注入漏洞

Itechscripts School Management Software is a campus management software. An injection vulnerability exists in Itechscripts School Management Software version 2.75, which stems from the parameter aid in the file /notice-edit.php that can lead to SQL injection...

PT-2025-1328 · Itechscripts · Itechscripts School Management

Name of the Vulnerable Software and Affected Versions: Itechscripts School Management Software version 2.75 Description: A critical issue has been found in the software, affecting an unknown part of the /notice-edit.php file. The manipulation of the aid argument leads to SQL injection. It is...

CVE-2017-20196: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2024-12816 NOTICE BOARD BY TOWKIR <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'notice-board' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-12816

CVE-2024-12816 is a Stored Cross-Site Scripting vulnerability in the WordPress plugin “NOTICE BOARD BY TOWKIR” (versions ≤ 3.1). The flaw arises from insufficient input sanitization and output escaping on attributes used by the plugin’s notice-board shortcode. This allows authenticated attackers ...

PT-2025-1955 · WordPress · Notice Board By Towkir

Name of the Vulnerable Software and Affected Versions: NOTICE BOARD BY TOWKIR plugin for WordPress versions up to, and including, 3.1 Description: The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'notice-board' shortcode due to...

WordPress plugin NOTICE BOARD BY TOWKIR 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

CVE-2024-12816: Improper Neutralization of Input During Web Page Generation

The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'notice-board' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-0710

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the...

CVE-2025-0710

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the...

CVE-2025-0710

CVE-2025-0710 affects CampCodes School Management Software 1.0. The vulnerability is in the Notice Board Page, specifically the file/endpoint /notice-list where the Notice parameter can be manipulated to trigger cross-site scripting. The issue is exploitable remotely, and public disclosure of the...

CVE-2025-0710 CampCodes School Management Software Notice Board Page notice-list cross site scripting

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the...