CVE-2025-23976 WordPress Issuu Panel plugin <= 2.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in operationsissuu Issuu Panel issuu-panel allows Stored XSS.This issue affects Issuu Panel: from n/a through = 2.1.1...

CVE-2025-23976

CVE-2025-23976 : A CSRF to Stored XSS vulnerability exists in the WordPress plugin “Issuu Panel” (versions up to and including 2.1.1). Public sources (NVD/Red Hat) describe a CSRF flaw that enables stored XSS, affecting Issuu Panel releases

CVE-2025-23976 WordPress Issuu Panel plugin <= 2.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in operationsissuu Issuu Panel issuu-panel allows Stored XSS.This issue affects Issuu Panel: from n/a through = 2.1.1...

PT-2025-5240 · Issuu · Issuu Panel

Name of the Vulnerable Software and Affected Versions: Issuu Panel versions n/a through 2.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web application,...

WordPress plugin Issuu Panel has a cross-site request fraud vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-23976: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in operationsissuu Issuu Panel issuu-panel allows Stored XSS.This issue affects Issuu Panel: from n/a through = 2.1.1...

CVE-2025-0843

A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unknown function of the file admindashboard.php of the component Admin Panel. The manipulation of the argument email/password leads to sql injection. It is possible to launch the...

CVE-2025-0843

A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unknown function of the file admindashboard.php of the component Admin Panel. The manipulation of the argument email/password leads to sql injection. It is possible to launch the...

CVE-2025-0843

CVE-2025-0843 affects needyamin Library Card System 1.0, specifically the Admin Panel’s admindashboard.php. The vulnerability arises from unsafely handling the email and password parameters, enabling remote SQL injection. This is described across multiple connected records (NVD, Red Hat, CVE list...

CVE-2025-0843 needyamin Library Card System Admin Panel admindashboard.php sql injection

A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unknown function of the file admindashboard.php of the component Admin Panel. The manipulation of the argument email/password leads to sql injection. It is possible to launch the...

CVE-2024-23733

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to the...

drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too

...

CVE-2025-0843: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unknown function of the file admindashboard.php of the component Admin Panel. The manipulation of the argument email/password leads to sql injection. It is possible to launch the...

Software AG webMethods security vulnerabilities

Software AG webMethods is Software AG's suite of integration and application development tools used to help organizations with tasks such as application integration, data integration, business process management, and application development. webMethods is designed to help organizations better...

PT-2025-4069 · Unknown · Needyamin Library Card System

Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A critical issue has been identified in the Admin Panel component, specifically in the admindashboard.php file, where an unknown function is affected. The manipulation of the email and...

CVE-2024-23733

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to the...

PT-2025-2365 · Software Ag · Webmethods

Name of the Vulnerable Software and Affected Versions: Software AG webMethods versions 10.15.0 before Core Fix7 Description: The issue allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to t...

CVE-2024-23733

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to the...

CVE-2024-23733

Software AG webMethods API Integration Server version 10.15.0 (specifically version 10.15.0.0000-0092 ) is vulnerable to an Incorrect Access Control flaw. An attacker can reach the administration panel by sending an arbitrary username and a blank password to the /WmAdmin/#/login/ URI. This allows...

CVE-2024-56529

Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a session identifier when HSTS is disabled on a victim's browser. After a user logs in, they are authenticated and the session identifier is valid. Then, a remote attacker can access...