80 matches found
CVE-2022-47602: Improper Neutralization of Input During Web Page Generation
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in JoomUnited WP Table Manager plugin = 3.5.2 versions...
PT-2023-15425 · Joomunited · Wp Table Manager
Name of the Vulnerable Software and Affected Versions: JoomUnited WP Table Manager plugin versions prior to 3.5.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher privileges. There is no...
WP Table Manager < 3.5.3 - Contributor+ Stored XSS
The plugin does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...
WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Broken Access Control
Software WP Table Manager Type Plugin Vulnerable versions = 3.5.2 Fixed in 3.5.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-47601 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID dd961e3e7567 Credits Cat Required privilege...
WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)
Software WP Table Manager Type Plugin Vulnerable versions = 3.5.2 Fixed in 3.5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47602 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 400e13da24ca Credits Cat Required...
CVE-2022-38295
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...
CVE-2022-38295
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...
WordPress plugin WP Table Manager has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2022-24266
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...
CVE-2022-24264
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...
CVE-2022-24266
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...
CVE-2022-24264
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...
Sql injection
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...
PT-2022-16576
Name of the Vulnerable Software and Affected Versions Cuppa CMS version 1.0 Description A SQL injection issue was found in the /administrator/components/table manager/ endpoint via the order by parameter. This allows for potential exploitation of the system. Recommendations For Cuppa CMS version...
PT-2022-16574
Name of the Vulnerable Software and Affected Versions Cuppa CMS version 1.0 Description A SQL injection issue was found in the /administrator/components/table manager/ endpoint via the search word parameter. This allows for potential exploitation of the system. Recommendations For Cuppa CMS versi...
CVE-2018-19918
CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...
PT-2018-13977
Name of the Vulnerable Software and Affected Versions CuppaCMS versions prior to 2018-09-03 Description A stored XSS issue exists, allowing exploitation via the section name in the administrator//component/table manager/view/cu menus section. Recommendations For versions prior to 2018-09-03, upda...
Wordpress plugin wp-Table <= 1.43 (inc_dir) RFI Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43 incdir Remote File...
wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability
=========================================================================================== o wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability Software : wp-Table v1.52 Vendor : http://wordpress.org/ Download : http://wordpress.org/extend/plugins/wp-table/wp-table.zip Author :...
WordPress Plugin wp-Table 1.43 - inc_dir Remote File Inclusion
WordPress Plugin wp-Table 1.43 - incdir Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43...