CVE-2025-15267

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btbbaccordionitem shortcode in all versions up to, and including, 5.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin Bold Page Builder 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

EUVD-2023-12644

Malicious code in bioql PyPI...

(RHSA-2023:0633) Moderate: Red Hat OpenShift (Logging Subsystem) security update

Logging Subsystem 5.5.7 - Red Hat OpenShift...

CVE-2023-0771

SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...

Sql injection

SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...

UBUNTU-CVE-2023-0771

SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...

CVE-2023-0771 SQL Injection in ampache/ampache

SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...

Ampache Cross-Site Scripting Vulnerability (CNVD-2023-07918)

Ampache is a web-based audio/video application and file manager. cross-site scripting vulnerability exists in versions prior to Ampache 5.5.7, which stems from the fact that a user can insert malicious js in url-specific parameters and send links to other users, leading to a cross-site scripting...

CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache

Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...

Authorization bypass in Spring Security

In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an authorization bypass...

[SECURITY] Fedora 31 Update: kernel-5.5.7-200.fc31

The kernel meta package...

PT-2019-7259 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.5.7 Description: The issue concerns multiple XSS problems. Recommendations: For versions prior to 5.5.7, update to version 5.5.7 or later to resolve the issue...

Nagios XI < 5.5.8 Multiple Vulnerabilities

Nagios XI is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagiosxi"; if description...