PT-2025-3017

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A race condition vulnerability is present in the distributed notification module. Successful exploitation of this vulnerability may cause features to...

CVE-2024-56446: Use of Uninitialized Variable

Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

CVE-2024-50808

SeaCms version 13.1 is vulnerable to code injection within the notification module of the member message notification module in the backend user module. The root cause is the unsafe handling of the "notify" variable in the admin_notify.php file. This vulnerability could allow an attacker to injec...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

PT-2024-34416 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCms version 13.1 Description: The issue is related to a code injection vulnerability in the notification module of the member message notification module in the backend user module. This vulnerability occurs due to the unsafe handling of t...

CVE-2024-50808: Improper Control of Generation of Code

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

CVE-2023-52382

CVE-2023-52382 entry is rejected/not used.

PT-2024-14572 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns improper control over foreground service notifications in the notification module. Successful exploitation may affect service confidentiality. Recommendations: At...

Cross-site Scripting (XSS)

neos/neos is vulnerable to cross-site scriptingXSS attacks. The library does not properly escape the HTML content in notification module, allowing an attacker to inject and execute malicious javascript on victim's browser...

XSS in various backend modules due to (un)escaping in JS notification module

The notification module displaying flash messages unscapes HTML coming from the server, resulting in XSS vulnerabilities with various names and labels of entities eg. workspace title or media title. This however means you must be a logged in user with respective rights in the first place to...

PT-2022-28256

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue concerns the notification module, which fails to properly escape HTML from the server, leading to potential XSS vulnerabilities. This could affect various entity names and label...

PT-2019-20515

This module provides a field on user profiles which allows users to get a notification when their account logs in to the site. The notification e-mail includes a link which will terminate all sessions for that user. This is useful in the case of unauthorised access to the account. The module...