2681 matches found
Malicious code in @baywa-re-lusy/nsemea-salestransaction-lib-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9605e1f17bd8907425f5176a55ff40f7f9ffc6c94912d17c753f3fdb34361caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-3829 PHPGurukul Men Salon Management System sales-reports-detail.php sql injection
A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack...
CVE-2025-3829
PHPGurukul Men Salon Management System 1.0 is affected by a SQL injection in /admin/sales-reports-detail.php caused by manipulation of the fromdate/todate parameters. The issue can be exploited remotely and has been publicly disclosed. Public details consistently identify this as a critical issue...
CVE-2025-32541
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin WooCommerce Sales MIS Report woocommerce-mis-report allows Reflected XSS.This issue affects WooCommerce Sales MIS Report: from n/a through = 4.0.3...
CVE-2025-32541
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin WooCommerce Sales MIS Report woocommerce-mis-report allows Reflected XSS.This issue affects WooCommerce Sales MIS Report: from n/a through = 4.0.3...
CVE-2025-32541 WordPress WooCommerce Sales MIS Report Plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin WooCommerce Sales MIS Report woocommerce-mis-report allows Reflected XSS.This issue affects WooCommerce Sales MIS Report: from n/a through = 4.0.3...
CVE-2025-32541 WordPress WooCommerce Sales MIS Report Plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin WooCommerce Sales MIS Report allows Reflected XSS. This issue affects WooCommerce Sales MIS Report: from n/a through 4.0.3...
CVE-2025-32541
CVE-2025-32541 — Affected software: WooCommerce Sales MIS Report. Type: Reflected XSS (Improper Neutralization of Input During Web Page Generation). Impact per available data: High (CVSS 3.1 base 7.1; confidentiality/ integrity/ availability implications are described as low). Affects versions: f...
WordPress plugin WooCommerce Sales MIS Report 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...
PT-2025-16064 · Unknown · Woocommerce Sales Mis Report
Name of the Vulnerable Software and Affected Versions: WooCommerce Sales MIS Report versions prior to 4.0.3 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS. Recommendations: For...
WordPress WooCommerce Sales MIS Report Plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WooCommerce Sales MIS Report versions = 4.0.3...
CVE-2025-31553
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows SQL Injection.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a...
CVE-2025-31553 WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows SQL Injection.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a...
CVE-2025-31553
CVE-2025-31553 applies to the WordPress plugin “Advanced WooCommerce Product Sales Reporting” (WPFactory). It is described as an unauthenticated SQL Injection affecting versions from the affected range up to and including 3.1. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L w...
WordPress Simple Sticky Add To Cart For WooCommerce plugin <= 1.4.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by theviper17 in WordPress Plugin Simple Sticky Add To Cart For WooCommerce versions = 1.4.9...
WordPress plugin Advanced WooCommerce Product Sales Reporting SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
MAL-2025-2822 Malicious code in @uniqa/sales-ms-api (npm)
--- -= Per source details. Do not edit below this line.=-...
Akamai Wins Best Sales Leadership Development Program from Brandon Hall
Learn how Akamai's award-winning sales leadership development program transforms sales managers into impactful coaches, driving growth and performance...
CVE-2024-12589 Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.19.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Countdown Timer
The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. This makes it possible fo...