WordPress plugin Forminator Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Forminator plugin <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter vulnerability

Reflected Cross-Site Scripting via Title Parameter vulnerability discovered by Asaf Mozes in WordPress Plugin Forminator versions = 1.38.2...

Cross-site Scripting (XSS)

Dolibarr is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input sanitization due to a crafted payload injected into the Title parameter in the Product module, allowing attackers to execute arbitrary web scripts or HTML...

CVE-2024-57665

JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without filtering...

CVE-2024-57665

JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without filtering...

JFinalCMS 安全漏洞

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS version 1.0, which originates from the title parameter in rc/main/java/com/cms/entity/Content.java that can lead to SQL injection...

PT-2025-3532 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 1.0 Description: The issue is related to SQL Injection in the Content.java file. The cause of the problem is that the title parameter is controllable and is concatenated directly into filterSql without filtering. This allows...

CVE-2024-57665

JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without filtering...

CVE-2024-57665

JFinalCMS version 1.0 is vulnerable to SQL Injection within the rc/main/java/com/cms/entity/Content.java file. The vulnerability exists because the title parameter is user-controllable and is concatenated directly into filterSql without any proper filtering. This flaw allows for potential SQL Inj...

GHSA-2V3R-GVQ5-QQGH Dolibarr Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

CVE-2024-55228

A cross-site scripting XSS vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

UBUNTU-CVE-2024-55228

A cross-site scripting XSS vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

UBUNTU-CVE-2024-55227

A cross-site scripting XSS vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

Dolibarr 安全漏洞

Dolibarr is a Dolibarr open source application. It can help manage the activities of user organizations. A security vulnerability exists in Dolibarr v21.0.0-beta, which stems from the vulnerability of the Events/Agenda module to a cross-site scripting attack, where an attacker can execute arbitra...

Dolibarr 安全漏洞

Dolibarr is a Dolibarr open source application. It can help manage the activities of user organizations. A security vulnerability exists in Dolibarr v21.0.0-beta, which stems from the vulnerability of the Product module to a cross-site scripting attack, where an attacker can execute arbitrary web...

PT-2025-3106 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 21.0.0-beta Description: A cross-site scripting XSS vulnerability in the Product module of Dolibarr allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter. This issue...

CVE-2024-55228

A cross-site scripting XSS vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

WordPress plugin Stackable 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-1754 · WordPress · Stackable – Page Builder Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: Stackable – Page Builder Gutenberg Blocks plugin for WordPress versions up to, and including, 3.13.11 Description: The issue is related to Stored Cross-Site Scripting via the title parameter of the Button block due to insufficient input...

CVE-2024-57372

The InformationPush master version is vulnerable to a Cross-Site Scripting (XSS) flaw due to the improper neutralization of input during web page generation. A remote attacker can exploit this by targeting the title , time , and msg parameters to obtain sensitive information. As a temporary worka...