20356 matches found
CVE-2009-3539
Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...
CVE-2009-2448
Cross-site scripting XSS vulnerability in ogpshow.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the searchchoice parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-2447
Multiple cross-site scripting XSS vulnerabilities in ogpshow.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 display parameter...
CVE-2005-2840
Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the 1 Download, 2 Search, 3 Web links, 4 Blocks, 5 Messages, 6 News, 7 Comments, 8 Settings, 9 Stats or 10 subjects modules...
CVE-2005-2839
Multiple cross-site scripting XSS vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via 1 dl-search.php or 2 wl-search.php...
CVE-2024-57529
Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code...
CVE-2024-57529
Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code...
CVE-2009-0752
Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism...
CVE-2002-2080
Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service memory and CPU consumption via a large number of RCPT TO: messages during an SMTP session...
CVE-2025-47582
Deserialization of Untrusted Data vulnerability in QuantumCloud WPBot Pro Wordpress Chatbot allows Object Injection.This issue affects WPBot Pro Wordpress Chatbot: from n/a through 12.7.0...
CVE-2025-4415
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...
CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...
CVE-2025-4415
CVE-2025-4415 affects the Drupal Piwik PRO module prior to 1.3.2. The issue is described as Improper Neutralization of Input During Web Page Generation, enabling Cross-Site Scripting (XSS). Affected versions are 0.0.0 through 1.3.2, with public references indicating an authenticated XSS concern (...
CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...
CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...
WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Nguyễn Trung Kiên anhchangmutrang in WordPress Plugin Ads Pro versions = 4.89...
Malicious code in pro-article-context (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d5ce94037caccdc08f9aa0d0b4e3c7ad2d0aa541b93fafeba6db855b86b2d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-57529
CVE-2024-57529 describes a Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v1.6.2.20 that could allow a remote attacker to execute arbitrary code. The CVE entry provides a CVSSv3.1 base score of 6.1 (Medium) with network attack vector, low attack complexity, no privileges required, ...
VulnCheck KEV: CVE-2025-47696
A vulnerability exists in the WordPress Blog Designer PRO for WordPress plugin that allows for disclosure of sensitive local files such as those that are used to store credentials...