CVE-2022-43271

CVE-2022-43271 저장된 크로스 사이트 스크립팅 XSS 제품: Move CRM https://inhabit.com.au/Move-Real-Estate-CRM-Software 발견 날짜: 2/8/2022 수정 날짜: 4/8/2022 영향 받는 버전: 버전 4, 빌드 260 수정된 버전: 버전 4, 빌드 261 설명: 이 취약점은 CRM의 '직원 설정' 중 '프로필' 텍스트 상자에서 발견되었습니다. 변경 사항을 저장하고 POST 요청을 가로챌 때 'lProfileCopy' 매개변수를 수정하여 XSS 페이로드를 포함시키고...

CVE-2026-89007

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capability check in one of its appointment-deletion functions, allowing users with its low-privileged custom Staff role to delete arbitrary appointments...

CVE-2026-89007

The Bookit — Booking & Appointment Calendar WordPress plugin prior to 2.6.0.5 contains a missing authorization check in one of its appointment-deletion functions. This allows users holding the plugin's low-privileged custom Staff role to delete arbitrary appointments , exceeding their intended pe...

WordPress Bookit — Booking & Appointment Calendar plugin < 2.6.0.5 - Bookit Staff+ Appointment PII Disclosure vulnerability

Bookit Staff+ Appointment PII Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin BookIt versions 2.6.0.5...

CVE-2026-89007 Bookit < 2.6.0.5 - Bookit Staff+ Arbitrary Appointment Deletion via Missing Authorization

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capability check in one of its appointment-deletion functions, allowing users with its low-privileged custom Staff role to delete arbitrary appointments...

CVE-2026-93455 django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account

django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media paths. Attackers with low-privilege staff credentials can enumerate content identifiers and access unpublished drafts, page...

CVE-2024-40324

CVE-2024-40324 설명 E-Staff v5.1의 CRLF 주입 취약점으로 인해 공격자가 입력 필드에 캐리지 리턴CR 및 라인 피드LF 문자를 삽입하여 HTTP 응답 분할 및 헤더 조작을 유발할 수 있습니다. 취약점 유형 CRLF 공급업체 E-Staff 영향을 받는 제품 코드 베이스 E-Staff 5.1 영향을 받는 구성 요소 HTTP 헤더 공격 유형 원격 영향: 코드 실행 임의의 헤더 주입, 캐시 중독, 세션 하이재킹, 크로스 사이트 스크립팅XSS, 기타 악용으로 이어질 가능성이 있습니다. 발견자 Aleksey...

InvenTree-Path-Traversal-CVE-2026-33531

CVE-2026-33531 — InvenTree 보고서 템플릿의 경로 탐색Path Traversal 권고: GHSA-rhc5-7c3r-c769 CVE: CVE-2026-33531 심각도: 중간Medium 게시일: 2026-03-20 공로: @alonaki 설명 보고서 템플릿 엔진의 경로 탐색 취약점으로 인해 스태프staff 권한 사용자가 조작된 템플릿 태그를 통해 서버 파일시스템에서 임의의 파일을 읽을 수 있습니다. src/backend/InvenTree/report/templatetags/report.py의 영향을 받는 함수...

CVE-2026-87896

CVE-2026-87896 affects the Rox Appointment Booking WordPress plugin in versions prior to 1.2.8 . The vulnerability stems from a missing authorization check on a REST endpoint that returns booking agent (staff) records, allowing unauthenticated attackers to read sensitive staff data including emai...

EUVD-2026-80210

The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoint that returns booking agent staff records, allowing unauthenticated attackers to read staff email addresses, phone numbers, private internal notes and the linked WordPress account nam...

CVE-2026-56830

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store in packages/admin/src/Livewire/Components/Products/Form/Media.php without the editproducts authorization check used by sibling sub-forms. An authenticated staff user with...

Astra Linux – Vulnerability in Python-Django

Django versions prior to 2.2.24, 3.x prior to 3.1.12, and 3.2.x prior to 3.2.4 have a potential issue with directory traversal through django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default...

CVE-2021-46075

CVE-2021-46075 Exploit Title: 차량 서비스 관리 시스템 - '다중' 권한 상승으로 인한 CRUD 작업 Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 높음 참조: https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations https://nvd.nist.gov/vuln/detail/CVE-2021-46075...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 Exploit Title: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH References:...

Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers

Summary Five Filament groupedBulkActions blocks across the Shopper admin Livewire pages omit the -authorize... permission gate, while their per-record sibling actions and other Shopper Index pages such as Pages/Settings/Currencies.php, Pages/Reviews/Index.php, Pages/Collection/Index.php, and...

CVE-2026-86254

wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using raw integer comparison instead of the issamegym helper, allowing gym staff with gym=None to delete, deactivate, or activate any other user...

CVE-2026-14326

The Timetics WordPress plugin through 1.0.61 fails to enforce per-object ownership when updating appointments via its REST API . This allows users holding the plugin's custom staff role to modify, disable, or take over appointments belonging to other staff members. The vulnerability is classified...

CVE-2026-14326 Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR

The Timetics WordPress plugin through 1.0.61 does not enforce per-object ownership when updating appointments through its REST API, allowing users with its custom staff role to modify, disable, or take over appointments belonging to other staff members...

CVE-2026-14326 Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR

The Timetics WordPress plugin through 1.0.61 does not enforce per-object ownership when updating appointments through its REST API, allowing users with its custom staff role to modify, disable, or take over appointments belonging to other staff members...

django: Django: Remote code execution via GeoDjango spatial lookups

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...