IceCMS 跨站脚本漏洞

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site scripting vulnerability exists in IceCMS version 2.0.1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

CVE-2023-48743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Menard Simply Exclude allows Reflected XSS.This issue affects Simply Exclude: from n/a through 2.0.6.6...

Shuttle Booking Software Cross-Site Scripting Vulnerability

Shuttle Booking Software is a PHP Jabbers open source shuttle booking software. A cross-site scripting vulnerability exists in version 2.0 of Shuttle Booking Software. A remote attacker can use this vulnerability to execute arbitrary code via the name, description, title and address parameters in...

PT-2023-30476 · WordPress · Star Cloudprnt For Woocommerce

Name of the Vulnerable Software and Affected Versions: Star CloudPRNT for WooCommerce plugin versions = 2.0.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially...

CVE-2023-47516

Cross-Site Request Forgery CSRF vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from n/a through 2.0...

TimeTec AWDMS Security Vulnerability

TimeTec AWDMS is an online application from TimeTec, Inc. It is used to provide an application programming interface for third-party application developers. A security vulnerability exists in TimeTec AWDMS version v.2.0, which stems from a cross-site scripting XSS vulnerability in the parameter...

WordPress Plugin Carousel, Recent Post Slider and Banner Slider Cross-Site Scripting Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-45837

Unauth. Reflected Cross-Site Scripting XSS vulnerability in XYDAC Ultimate Taxonomy Manager plugin = 2.0 versions...

PT-2023-29724 · Xydac · Xydac Ultimate Taxonomy Manager Plugin

Name of the Vulnerable Software and Affected Versions: XYDAC Ultimate Taxonomy Manager plugin versions = 2.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for the execution of malicious scripts on a user's browser,...

PT-2023-13009 · Sinec Nms · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 Description: A vulnerability has been identified in the affected application, where it assigns improper access rights to specific folders containing executable files and libraries. This could allow an...

CVE-2023-44237

Cross-Site Request Forgery CSRF vulnerability in Moriyan Jay WP Site Protector plugin = 2.0 versions...

PYSEC-2023-178

plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the ++api++ traverser is accidentally used multiple times in a url, handling it takes increasingly longer, making the server less...

Malicious code in mapsapi-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a12b68cea467324465b98ad4c7ffcddb67cac55eec195215bce156b916abbda The OpenSSF Package Analysis project identified 'mapsapi-area' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

BoidCMS 代码问题漏洞

BoidCMS is a free open source flat file CMS for building simple websites and blogs, developed in PHP and using JSON as the database. A code issue vulnerability exists in BoidCMS version v.2.0.0, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the G...

WordPress plugin Manager for Icomoon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Chengdu Flash Flood Disaster Monitoring and Warning System Path Traversal Vulnerability

Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system for Chengdu. A security vulnerability exists in Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0, which stems from an incorrect operation of the parameter...

PT-2023-28056 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A problematic issue was found in the Chengdu Flash Flood Disaster Monitoring and Warning System. This issue affects the file ServiceFileDownload.ashx and is...

Cute Http File Server Cross-Site Scripting Vulnerability

Cute Http File Server is a free, HTTP protocol file sharing server for iscute individual developers. A cross-site scripting vulnerability exists in Cute Http File Server version 2.0, which stems from a problem with the component Search that can lead to cross-site scripting...

CVE-2023-33925

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin = 2.0 versions...

Johnson Controls IQ Wifi 6 安全漏洞

Johnson Controls IQ Wifi 6 is a series of WiFi devices from Johnson Controls, Inc. A security vulnerability previously existed in Johnson Controls IQ Wifi 6 version 2.0.2, which stemmed from a brute force authentication attack that could be used by an unauthorized user to gain access to an accoun...