CVE-2021-47975 WordPress Plugin WP Learn Manager 1.1.2 Stored XSS

WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the fieldtitle parameter. Attackers can submit POST requests to the jslmfieldordering page with XSS payloads in the fieldtitle field to execute...

CVE-2021-47956

The connected documents identify CVE-2021-47956 as affecting EgavilanMedia PHPCRUD 1.0 and describe a SQL injection vulnerability allowing unauthenticated attackers to manipulate database queries via the firstname parameter. Exploitation details include sending crafted POST requests to insert.php...

EUVD-2021-34841

LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the searchquery parameter. Attackers can send POST requests to /search.php with malicious searchquery values using CASE WHEN statements to extra...

CVE-2021-47954 LayerBB 1.1.4 SQL Injection via search_query Parameter

LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the searchquery parameter. Attackers can send POST requests to /search.php with malicious searchquery values using CASE WHEN statements to extra...

EUVD-2021-34840

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php...

CVE-2021-47934 MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRF

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php...

CVE-2021-47934

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php...

CVE-2021-47934

MyBB Timeline Plugin 1.0 is affected by cross-site scripting (XSS) in thread titles, post content, and user profile fields (Location, Bio). A cross-site request forgery (CSRF) in the timeline.php profile action can be exploited to change a user’s cover picture via malicious forms that execute whe...

CVE-2026-44826

creationtimestamp| type| source ---|---|--- 2026-05-16 15:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mly4ft64le2e...

CVE-2026-5715

creationtimestamp| type| source ---|---|--- 2026-05-16 12:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlxu4adjiv2i...

CVE-2026-44554

creationtimestamp| type| source ---|---|--- 2026-05-16 12:03:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxscvgckx2r...

CVE-2026-44553

creationtimestamp| type| source ---|---|--- 2026-05-16 12:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxscny7j22e 2026-05-21 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmd6ie77xw2w...

CVE-2026-4100

creationtimestamp| type| source ---|---|--- 2026-05-16 11:02:08+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mlxp2p5ko22h...

CVE-2026-44552

creationtimestamp| type| source ---|---|--- 2026-05-16 11:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxoztzg2r2c...

CVE-2026-6690

creationtimestamp| type| source ---|---|--- 2026-05-16 06:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlx7yjc64q2l 2026-05-16 06:32:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mlx7yjq5xq27...

CVE-2026-8656

creationtimestamp| type| source ---|---|--- 2026-05-16 06:31:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlx7xbbpg62t...

Cross-site Scripting (XSS)

ci4-cms-erp/ci4ms is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization and output encoding of user-controlled post data in the Menu Management functionality, which allows an attacker to inject malicious scripts that execute in administrative dashboards and...

MyBB Timeline Plugin 跨站脚本漏洞

The MyBB Timeline Plugin is a plugin provided by MyBB Corporation that offers dynamic timeline displays and social activity stream functions for MyBB forums. Version 1.0 of the MyBB Timeline Plugin contained a cross-site scripting vulnerability. This vulnerability stemmed from cross-site scriptin...

PT-2026-41451

Name of the Vulnerable Software and Affected Versions LayerBB version 1.1.4 Description An SQL injection allows unauthenticated attackers to manipulate database queries by injecting SQL code. This is achieved by sending POST requests to the '/search.php' endpoint using malicious values in the...

PT-2026-41448

Name of the Vulnerable Software and Affected Versions MyBB Timeline Plugin version 1.0 Description Cross-site scripting issues allow the injection of malicious scripts via thread titles, post content, and user profile fields such as Location and Bio. Additionally, a cross-site request forgery fla...