886 matches found
CVE-2020-22732
CMS Made Simple CMSMS 2.2.14 allows stored XSS via the Extensions Fie Picker...
CVE-2020-1385
An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'...
CVE-2014-3844
The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information...
CVE-2018-21060
An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is a Keyboard learned words leak in the locked state via the emergency contact picker. The Samsung IDs are SVE-2018-11989, SVE-2018-11990 September 2018...
CVE-2014-3845
Cross-site request forgery CSRF vulnerability in the TinyMCE Color Picker plugin before 1.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change plugin settings via unknown vectors. NOTE: some of these details are obtained from third par...
Malicious code in @sporta-technology/d11-web-components.date-picker.time-picker (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3321 Malicious code in @sporta-technology/d11-web-components.date-picker.time-picker (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.date-picker.date-time-picker (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3320 Malicious code in @sporta-technology/d11-web-components.date-picker.date-time-picker (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.date-picker.date-picker (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3319 Malicious code in @sporta-technology/d11-web-components.date-picker.date-picker (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-26746
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in caalami Advanced Custom Fields: Link Picker Field acf-link-picker-field allows Reflected XSS.This issue affects Advanced Custom Fields: Link Picker Field: from n/a through = 1.2.8...
CVE-2025-26746
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in caalami Advanced Custom Fields: Link Picker Field acf-link-picker-field allows Reflected XSS.This issue affects Advanced Custom Fields: Link Picker Field: from n/a through = 1.2.8...
CVE-2025-26746 WordPress Advanced Custom Fields: Link Picker Field plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in caalami Advanced Custom Fields: Link Picker Field acf-link-picker-field allows Reflected XSS.This issue affects Advanced Custom Fields: Link Picker Field: from n/a through = 1.2.8...
PT-2025-16511 · Unknown · Advanced Custom Fields Pro
Name of the Vulnerable Software and Affected Versions: NotFound Advanced Custom Fields: Link Picker Field versions 1.2.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This enables...
WordPress plugin Advanced Custom Fields: Link Picker Field 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
CVE-2025-26746: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in caalami Advanced Custom Fields: Link Picker Field acf-link-picker-field allows Reflected XSS.This issue affects Advanced Custom Fields: Link Picker Field: from n/a through = 1.2.8...
Malicious code in paypal-product-picker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702cb794363fc21a16f5752a5c2d307a7270f7304ea6d429da5c1fbba25ad3ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2579 Malicious code in paypal-product-picker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702cb794363fc21a16f5752a5c2d307a7270f7304ea6d429da5c1fbba25ad3ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...