WordPress Multifox Plus plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Multifox Plus versions = 1.1.6...

CVE-2024-10839

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

CVE-2024-10839

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

CVE-2024-10839

CVE-2024-10839 affects Zohocorp/ManageEngine SharePoint Manager Plus (versions 4503 and prior). The vulnerability is an authenticated XML External Entity (XXE) issue in the Management option. Impact is described as high confidentiality impact and partial availability impact per the NVD metrics. N...

CVE-2024-10839 XML External Entity

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

CVE-2024-24409

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...

CVE-2024-24409

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...

CVE-2024-24409 Privilege Escalation

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...

CVE-2024-24409 Privilege Escalation

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...

CVE-2024-24409

CVE-2024-24409 affects Zohocorp ManageEngine ADManager Plus versions 7203 and earlier, with a Privilege Escalation in the Modify Computers option. The issue enables elevation of privilege by manipulating computer object attributes (e.g., userAccountControl/msDS-AllowedToDelegateTo) when a technic...

PT-2024-16580 · Zoho · Zoho Manageengine Sharepoint Manager Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine SharePoint Manager Plus versions 4503 and prior Description: The issue is an authenticated XML External Entity XXE vulnerability in the Management option. This vulnerability impacts specific versions of the software, allowing...

WordPress Multifox Plus Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Multifox Plus Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51916 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d5977e548f71 Credits SOPROBRO Required privilege Contributor...

ZOHO ManageEngine SharePoint Manager Plus 安全漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. It helps you manage, audit, and report on your local and Office 365 SharePoint environments. It also allows you to monitor, track and analyze all activities in your SharePoint infrastructure t...

WordPress myCred plugin <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin myCred versions = 2.7.4...

ManageEngine ADAudit Plus < Build 7250 SQL Injection

The version of ManageEngine ADAudit Plus installed on the remote host is prior to 7.2, Build 7250. It is, therefore, affected by SQL injection vulnerability. - Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report. CVE-2024-48878 Not...

WordPress Table of Contents Plus plugin <= 2411 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Table of Contents Plus versions = 2411...

CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

CVE-2024-5578

The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-5578

The CVE-2024-5578 entry concerns Table of Contents Plus (WordPress plugin) up to version 2408. Connected sources confirm a root cause of insufficient sanitisation/escaping of some plugin settings, enabling stored XSS by high-privilege users (e.g., editors) and while unfiltered_html is disallowed....