PT-2022-25644 · WordPress · 2Kb Amazon Affiliates Store Plugin

Name of the Vulnerable Software and Affected Versions: 2kb Amazon Affiliates Store plugin versions =2.1.5 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website, potentially stealing user data or taking...

PT-2022-24253

Name of the Vulnerable Software and Affected Versions Nintex Workflow plugin version 5.2.2.30 for SharePoint Description The issue allows for Cross-Site Scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. This can lead to unauthorized access or...

Read the Docs vulnerable to Cross-Site Scripting (XSS)

Impact This vulnerability allowed a malicious user to serve arbitrary HTML files from the main application domain readthedocs.org/readthedocs.com by exploiting a vulnerability in the code that serves downloadable content from a project. Exploiting this would have required the attacker to get a...

CVE-2022-41542

devhub 0.102.0 was discovered to contain a broken session control...

Design/Logic Flaw

devhub 0.102.0 was discovered to contain a broken session control...

CVE-2022-41542

devhub 0.102.0 was discovered to contain a broken session control...

DevHub 代码问题漏洞

DevHub is a GitHub notification and activity on the desktop from DevHub, Inc. A security vulnerability exists in DevHub version 0.102.0 that stems from a corrupt session control...

CVE-2022-41542

devhub 0.102.0 was discovered to contain a broken session control...

CVE-2022-41542: Insufficient Session Expiration

devhub 0.102.0 was discovered to contain a broken session control...

PT-2022-25927 · Devhub · Devhub

Name of the Vulnerable Software and Affected Versions: devhub version 0.102.0 Description: The issue is related to broken session control in the software. Recommendations: For devhub version 0.102.0, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2022-41542

devhub 0.102.0 was discovered to contain a broken session control...

CVE-2022-41542

CVE-2022-41542 affects devhub, specifically version 0.102.0, due to a broken session control. The CVE entry lists a Network attack vector with low privileges required and no user interaction, and a base score of 5.4 (Medium). Public references confirm the issue is tied to devhub 0.102.0 and descr...

PT-2022-21164

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 20.3.1 Description The issue is related to Cross-site Scripting XSS - Stored, which allows attackers to inject malicious scripts into the application. This can lead to unauthorized access to sensitive data or...

PT-2022-16811

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.21 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take...

PT-2022-19040

Name of the Vulnerable Software and Affected Versions Limbas version 4.3.36.1319 Description The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user's...

PT-2022-13919

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.15 Description The issue is related to a Cross-Site Scripting XSS attack in the /demo/module/?module=HERE endpoint. XSS attacks typically allow an attacker to inject malicious scripts into a website,...

PT-2022-13597

Name of the Vulnerable Software and Affected Versions chatwoot/chatwoot versions prior to 2.5.0 Description The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into the application, which are then stored and executed by the...

rainloop -- cross-site-scripting (XSS) vulnerability

Simon Scannell reports: The code vulnerability can be easily exploited by an attacker by sending a malicious email to a victim that uses RainLoop as a mail client. When the email is viewed by the victim, the attacker gains full control over the session of the victim and can steal any of their...

PT-2022-13537

Name of the Vulnerable Software and Affected Versions autolab/autolab versions prior to 2.8.0 Description The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing an attacker to inject malicious scripts. This...

PT-2022-18987

Name of the Vulnerable Software and Affected Versions Craft CMS versions prior to 3.7.29 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. This can lead to unauthorized access to sensitive data or...