CVE-2023-47528

CVE-2023-47528 concerns the WP Edit Username WordPress plugin (

CVE-2023-47528 WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...

CVE-2023-47528 WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...

PHPGrukul-Pre-School-Enrollment-System-v1.0

PHPGrukul-Pre-School-Enrollment-System-v1.0 I wanted to touch...

CVE-2023-43901

Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user...

CVE-2023-43901

Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user...

CVE-2023-47528: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...

PT-2023-30487

Name of the Vulnerable Software and Affected Versions Sajjad Hossain Sagor WP Edit Username plugin versions 1.0.5 and earlier Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations For Sajja...

PT-2023-30451

Name of the Vulnerable Software and Affected Versions Pre-School Enrollment version 1.0 Description The issue allows for SQL Injection via the username parameter in the "preschool/admin/" page. This could potentially lead to unauthorized access or manipulation of data. Recommendations For...

WordPress Plugin WP Edit Username Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

EnBw SENEC Legacy Storage Box Information Disclosure

Advisory ID: Ph0s-2023-002 Product: EnBw - SENEC legacy storage box: V1-V3 Manufacturer: SENEC - a part of EnBw Affected Versions: Firmware: all as of 2023-06-19 Tested Versions: current Vulnerability Type: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Risk Level: CVSS v3.1...

PT-2023-8977 · Grafana +3 · Grafana +3

Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: The issue is related to a weakness in the authentication mechanism of Grafana, specifically with the verify email enabled option. This option only validates email addresses during the sign-...

Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability

H5P metadata automatically populated the author with the user's username, which could be sensitive information...

CVE-2023-5545

H5P metadata automatically populated the author with the user's username, which could be sensitive information...

UBUNTU-CVE-2023-5545

H5P metadata automatically populated the author with the user's username, which could be sensitive information...

CVE-2023-5545

CVE-2023-5545: The vulnerability is an information disclosure where H5P metadata auto-populates the author field with the user’s username, potentially exposing sensitive information. Public sources in OSV and GHSA confirm this leakage across Moodle/H5P contexts. The provided materials do not spec...

CVE-2023-5545

H5P metadata automatically populated the author with the user's username, which could be sensitive information...

CVE-2023-5545: Exposure of Sensitive Information to an Unauthorized Actor

H5P metadata automatically populated the author with the user's username, which could be sensitive information...

PT-2023-32167 · H5P · H5P

Name of the Vulnerable Software and Affected Versions: H5P affected versions not specified Description: The issue concerns H5P metadata automatically populating the author field with the user's username, potentially exposing sensitive information. Recommendations: At the moment, there is no...

X (Formerly Twitter): Cross-Domain Leakage of X Username / UserID due to Dynamically Generated JS File

The vulnerability allowed the retrieval of a user's X username and user ID from a dynamically generated JavaScript file hosted on Twitter. An attacker could force a victim to import the file from a malicious website, bypassing the Same-Origin Policy and exposing the user's sensitive information...