3345 matches found
CVE-2025-0710 CampCodes School Management Software Notice Board Page notice-list cross site scripting
A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the...
CVE-2025-24634
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Svetoslav Marinov Orbisius Simple Notice orbisius-simple-notice allows Stored XSS.This issue affects Orbisius Simple Notice: from n/a through = 1.1.3...
CVE-2025-24634 WordPress Orbisius Simple Notice plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Svetoslav Marinov Orbisius Simple Notice orbisius-simple-notice allows Stored XSS.This issue affects Orbisius Simple Notice: from n/a through = 1.1.3...
CVE-2025-24634
CVE-2025-24634 affects the Orbisius Simple Notice WordPress plugin (versions ≤ 1.1.3). It is a Stored XSS due to improper input neutralization during web page generation. CVSS 3.1 base score 5.9 (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L). Connected sources indicate patching in version 1.1.3 (patched),...
CVE-2025-24634 WordPress Orbisius Simple Notice plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Svetoslav Marinov Orbisius Simple Notice orbisius-simple-notice allows Stored XSS.This issue affects Orbisius Simple Notice: from n/a through = 1.1.3...
WordPress Orbisius Simple Notice plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Pham Van Tam in WordPress Plugin Orbisius Simple Notice versions = 1.1.3...
PT-2025-5462 · WordPress · Orbisius Simple Notice
Name of the Vulnerable Software and Affected Versions: Orbisius Simple Notice versions 1.1.3 and earlier Description: The issue affects the Orbisius Simple Notice plugin, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting...
WordPress plugin Orbisius Simple Notice 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CampCodes School Management Software 代码注入漏洞
CampCodes School Management Software is a school management software from CampCodes, Inc. A code injection vulnerability exists in version 1.0 of CampCodes School Management Software, which stems from the parameter Notice in the file /notice-list and can lead to cross-site scripting...
CVE-2025-24634: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Svetoslav Marinov Orbisius Simple Notice orbisius-simple-notice allows Stored XSS.This issue affects Orbisius Simple Notice: from n/a through = 1.1.3...
CVE-2025-0710: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the...
PT-2025-4019
Name of the Vulnerable Software and Affected Versions CampCodes School Management Software version 1.0 Description A problematic vulnerability has been found in the software, affecting an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the Notice...
CVE-2024-42183
creationtimestamp| type| source ---|---|--- 2025-01-23 02:02:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2685 2025-01-23 02:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgesuax46y2j 2025-01-23 02:55:21+00:00| seen|...
Ubuntu 18.04 LTS : Django vulnerability (USN-7205-2)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7205-2 advisory. USN-7205-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the preceding description...
CGA-XP75-QHCG-GPQ4
Bulletin has no description...
CVE-2023-29857
creationtimestamp| type| source ---|---|--- 2025-01-22 17:01:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2585...
PT-2025-3932 · WordPress · The Buzz Club – Night Club
Name of the Vulnerable Software and Affected Versions: The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme versions up to, and including, 2.0.4 Description: The issue allows unauthorized modification of data, potentially leading to a denial of service. This is due to a missing...
Ubuntu: Security Advisory (USN-7214-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-23870
Cross-Site Request Forgery CSRF vulnerability in wygk Copyright Safeguard Footer Notice copyright-safeguard-footer-notice allows Stored XSS.This issue affects Copyright Safeguard Footer Notice: from n/a through = 3.0...
CVE-2025-23870
CVE-2025-23870 : CSRF in the WordPress plugin “Copyright Safeguard Footer Notice” enables Stored XSS in versions up to 3.0. Public details confirm the nature of the vulnerability and affected software; remediation status in connected sources indicates patch not yet available (Unpatched). Affected...