CVE-2023-23831

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Rating-Widget Rating-Widget: Star Review System plugin = 3.1.9 versions...

Yelp review system Uncontrolled Function Code Execution

The vulnerability of the Yelp review system lies in the inclusion of functions from an unreliable and uncontrolled area during the processing of documents using the ghelp scheme. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information and...

CVE-2023-23831

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Rating-Widget Rating-Widget: Star Review System plugin = 3.1.9 versions...

CVE-2023-23831 WordPress Rating Widget Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Rating-Widget Rating-Widget: Star Review System plugin = 3.1.9 versions...

WordPress Plugin Rating – Widget Rating – Widget: Star Review System Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-23831: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Rating-Widget Rating-Widget: Star Review System plugin = 3.1.9 versions...

PT-2023-19242 · WordPress · Rating-Widget: Star Review System

Name of the Vulnerable Software and Affected Versions: Rating-Widget: Star Review System plugin versions = 3.1.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be...

WordPress Rating-Widget: Star Review System plugin 2.8.9 - Information Disclosure vulnerability

Information Disclosure vulnerability found Tom Adams DXW in WordPress Rating-Widget: Star Review System version 2.8.9. Solution Update the WordPress Rating-Widget: Star Review System plugin to the latest available version at least 2.9.0...

WordPress Rating-Widget: Star Review System 2.8.9 Information Disclosure

Details ================ Software: Rating-Widget: Star Review System Version: 2.8.9 Homepage: https://wordpress.org/plugins/rating-widget/ Advisory report: https://advisories.dxw.com/advisories/rating-widget-debug-mode/ CVE: Awaiting assignment CVSS: 5 Medium; AV:N/AC:L/Au:N/C:P/I:N/A:N Descripti...

Rating-Widget: Star Review System <= 2.8.9 - Enable Debugging

The Rating-Widget: Star Review System WordPress plugin was affected by an Enable Debugging security vulnerability...

De-Journal Academic Journal And Peer Review System 1.0 SQL Injection

Exploit Title: De-Journal - Academic Journal and Peer Review System 1.0 - SQL Injection Dork: N/A Date: 11.08.2017 Vendor Homepage : https://sarutech.com/ Software Link: https://codecanyon.net/item/dejournal-academic-journal-and-peer-review-system/19533981 Demo: https://demo.sarutech.com/dejourna...

De-Journal 1.0 - SQL Injection

De-Journal 1.0 - SQL Injection Exploit Title: De-Journal - Academic Journal and Peer Review System 1.0 - SQL Injection Dork: N/A Date: 11.08.2017 Vendor Homepage : https://sarutech.com/ Software Link: https://codecanyon.net/item/dejournal-academic-journal-and-peer-review-system/19533981 Demo:...

SQL Injection Vulnerability in flagship version of modoer review system

Modoer is a local sharing, multi-functional review website management system. Developed and designed with PHP+MYSQL, open all source code.Modoer fully supports PC, cell phone, tablet; colleagues support microsoft integration, allowing the site to go deep into any place. Modoer review system...

Modoer review system field_type.inc.php file contains vulnerabilities

Modoer review system a professional review website system, a variety of industry reviews, you can freely regulate the type of review project. Modoer system 20150505 version of the background there is a file containment vulnerability, due to the code fails to exist for the existence of file...

Modoer review system admin.php cross-site script execution vulnerability

Modoer review system a professional review website system, a variety of industry reviews, you can freely regulate the type of review project. Modoer system version 20150505 cross-site scripting vulnerability exists in the background, due to the failure to limit the act parameters when loading...

Modoer review system database.inc.php arbitrary file deletion vulnerability

Modoer review system a professional review website system, a variety of industry reviews, you can freely regulate the type of review project. Modoer system 20150505 version of the background there are arbitrary file deletion vulnerability, due to the system does not limit the deletion of...

Denial of Service attack possibility in TYPO3 component Indexed Search

It has been discovered, that TYPO3 is susceptible to a Denial of Service attack. Component Type: TYPO3 CMS Release Date: February 23, 2016 Vulnerable subcomponent: Indexed Search Vulnerability Type: Denial of Service attack Affected Versions: Versions 6.2.0 to 6.2.18 and 7.6.0 to 7.6.3 Severity:...

Cross-Site Scripting exploitable by Editors

It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.13, 7.0.0 to 7.3.0 Severity: Low Suggested CVSS v2.0:...