524 matches found
CVE-2024-44725
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php...
CVE-2024-44725
AutoCMS version 5.4 is vulnerable to a SQL injection vulnerability. The root cause is the lack of validation for externally entered SQL statements within the sidebar parameter at the /admin/robot.php endpoint. An attacker can exploit this to execute illegal SQL commands, potentially leading to th...
CVE-2024-44725
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php...
CVE-2024-44725: Improper Neutralization of Special Elements used in an SQL Command
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php...
PT-2024-31223
Name of the Vulnerable Software and Affected Versions AutoCMS version 5.4 Description A SQL injection vulnerability was discovered in AutoCMS via the sidebar parameter at the "/admin/robot.php" API endpoint. This issue can be exploited, potentially allowing unauthorized access to sensitive data...
CVE-2024-44725
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php...
AutoCMS security vulnerabilities
AutoCMS is a content management system CMS from AutoCMS Open Source. It can help dealerships manage their website content, online advertising, social media and analytics. AutoCMS version 5.4 suffers from a SQL injection vulnerability that originates from the lack of validation of externally enter...
CVE-2024-5226 Fuse Social Floating Sidebar <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
The Fuse Social Floating Sidebar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the file upload functionality in all versions up to, and including, 5.4.10 due to insufficient validation of SVG files. This makes it possible for authenticated attackers, with contributor-level...
WordPress Fuse Social Floating Sidebar plugin <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via File Upload vulnerability discovered by wesley wcraft in WordPress Plugin Fuse Social Floating Sidebar versions = 5.4.10...
CVE-2024-5226: Improper Neutralization of Input During Web Page Generation
The Fuse Social Floating Sidebar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the file upload functionality in all versions up to, and including, 5.4.10 due to insufficient validation of SVG files. This makes it possible for authenticated attackers, with contributor-level...
WordPress plugin Fuse Social Floating Sidebar has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
BIT-MEDIAWIKI-2024-40600
An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries...
CVE-2024-40600
An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries...
CVE-2024-40605: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the Foreground skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries...
CVE-2024-40599: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries...
CVE-2024-40604: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries...
CVE-2024-40600
An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries...
PT-2024-28935
Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.42.1 Description An issue was discovered in the GuMaxDD skin for MediaWiki. There is stored XSS via MediaWiki:Sidebar top-level menu entries. Recommendations For versions through 1.42.1, consider disabling the...
PT-2024-28940
Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.42.1 Description An issue was discovered in the Nimbus skin for MediaWiki. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries. Recommendations For versions through 1.42.1, consider disabling...
