485 matches found
CVE-2023-49766
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Ultimate Addons for Contact Form 7 allows Stored XSS.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.2.0...
CVE-2023-43814
Discourse is an open source platform for community discussion. Attackers with details specific to a poll in a topic can use the /polls/groupedpollresults endpoint to view the content of options in the poll and the number of votes for groups of poll participants. This impacts private polls where t...
CVE-2020-22210
SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...
CVE-2015-9301
The liveforms plugin before 3.2.0 for WordPress has SQL injection...
CVE-2025-24785
iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a PHP error. The next user trying to load this dashboard would encounter a crashed start page. Version 3.2.1 fixes the issue by checking the provided layoutclass before saving th...
CVE-2025-24785 iTop dashboard vulnerable to denial of service
iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a PHP error. The next user trying to load this dashboard would encounter a crashed start page. Version 3.2.1 fixes the issue by checking the provided layoutclass before saving th...
CVE-2025-24785
CVE-2025-24785 concerns the iTop web-based IT Service Management tool. Affected version: 3.2.0, where an attacker could trigger a PHP error by sending a crafted URL, causing the next user’s dashboard start page to crash. The issue is addressed in version 3.2.1, which fixes the vulnerability by va...
PT-2025-21173 · Itop · Itop
Name of the Vulnerable Software and Affected Versions: iTop version 3.2.0 Description: The issue allows an attacker to send a URL to the server, triggering a PHP error. This error causes the start page to crash for the next user attempting to load the dashboard. Recommendations: For version 3.2.0...
iTop 输入验证错误漏洞
iTop is a simple, web-based IT service management tool from Combodo open source. An input validation error vulnerability exists in iTop version 3.2.0, which stems from the possibility that an attacker could send a URL resulting in a PHP error...
Flags SDK 信息泄露漏洞
Flags SDK is a Vercel open source Flags SDK for Vercel. An information disclosure vulnerability exists in Flags SDK 3.2.0 and earlier and @vercel/flags 3.1.1 and earlier, which stems from an information disclosure that could lead to access to a list of functional flags...
CVE-2025-3915
The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and...
WordPress plugin Aeropage Sync for Airtable 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A file upload vulnerability...
CVE-2025-32523
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in payphone WooCommerce – Payphone Gateway wc-payphone-gateway allows Reflected XSS.This issue affects WooCommerce – Payphone Gateway: from n/a through = 3.2.0...
WordPress plugin WooCommerce – Payphone Gateway 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
BIT-JOOMLA-2021-23126 [20210301] - Core - Insecure randomness within 2FA secret generation
An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand function within the process of generating the 2FA secret...
API Platform Core 安全漏洞
API Platform Core is a server component of API Platform open source by API Platform. A security vulnerability exists in API Platform Core version 3.2.0 that stems from a non-HTTP exception message being visible in a JSON error response...
CVE-2025-30789 WordPress Clearout Email Validator plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in clearoutio Clearout Email Validator clearout-email-validator allows Stored XSS.This issue affects Clearout Email Validator: from n/a through = 3.2.0...
WordPress Clearout Email Validator plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Clearout Email Validator versions = 3.2.0...
WordPress plugin Easy Automatic Newsletter Lite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...