EUVD-2021-25709

Malware in sbrugna...

CVE-2024-3311

Dreamer CMS (up to 4.1.3.0) contains a path traversal flaw in ZipUtils.unZipFiles (admin/ThemesController.java). The issue allows remote exploitation and has public disclosures; upgrading to version 4.1.3.1 fixes the vulnerability. The vulnerability exploits the unzip logic to access unauthorized...

CVE-2021-39348

The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $customprofile parameter found in the /inc/admin/views/backend-user-profile.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in version...

PT-2021-22554 · WordPress · Learnpress

Name of the Vulnerable Software and Affected Versions: LearnPress WordPress plugin versions up to and including 4.1.3.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient escaping on the custom profile parameter in the /inc/admin/views/backend-user-profile.php...