WordPress plugin add-posts-to-pages cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2025-54033

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mmc add host function may return an error, and failing to check this return value can lead to a memory leak in mmc alloc host and a null pointer dereference when calling mmc remove...

wger Workout Manager Cross-site Scripting vulnerability

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

GHSA-8M9P-3926-GFFR wger Workout Manager Cross-site Scripting vulnerability

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

CVE-2023-38758

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

CVE-2023-38758

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

CVE-2023-38758

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

PYSEC-2023-143

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

Cross site scripting

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

CVE-2023-37686

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Nurse Page in the Admin portal...

CVE-2023-37686

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Nurse Page in the Admin portal...

CVE-2023-37686

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Nurse Page in the Admin portal...

Self XSS in "Content Types / Add Content Type"

Description Add payload to field System name: Proof of Concept https://drive.google.com/file/d/1xJ24a3HveP4dpKXF5zmtsNIa2-wweoA/view?usp=sharing...

CVE-2023-37686

CVE-2023-37686 pertains to Online Nurse Hiring System v1.0, with a cross-site scripting (XSS) vulnerability on the Add Nurse Page of the Admin portal. The CVSS v3.1 base score is 4.8 (Medium): AV:N, AC:L, PR:H, UI:R, S:C, C:L, I:L, A:N. The connected documents confirm the issue is an XSS, but do ...

PT-2023-26073 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability found in the Add Nurse Page within the Admin portal. This type of vulnerability allows attackers to inject malicious scripts...

CVE-2023-37686

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Nurse Page in the Admin portal...

CVE-2023-38758

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

Online Nurse Hiring System Cross-Site Scripting Vulnerability

PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul, Inc. A security vulnerability exists in Online Nurse Hiring System v1.0, which originates from a cross-site scripting vulnerability in the Add Nurse page of the Admin portal...

New Version of Rilide Data Theft Malware Adapts to Chrome Extension Manifest V3

Cybersecurity researchers have discovered a new version of malware called Rilide that targets Chromium-based web browsers to steal sensitive data and steal cryptocurrency. "It exhibits a higher level of sophistication through modular design, code obfuscation, adoption to the Chrome Extension...

Xzengine 1.7 Add Administrator

==================================================================================================================================== | Title : xzengine v.1.7 Add Admin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit | | Vendo...