11936 matches found
PT-2025-3973 · Itsourcecode · Itsourcecode Farm Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Farm Management System versions up to 1.0 Description: A critical issue has been found in the itsourcecode Farm Management System, affecting unknown code of the file /add-pig.php. The manipulation of the pigphoto argument leads t...
itsourcecode Farm Management System 注入漏洞
itsourcecode Farm Management System is an open source farm management system from itsourcecode. An injection vulnerability exists in itsourcecode Farm Management System version 1.0, which stems from the parameter pigno in the file /add-pig.php that causes SQL injection...
The vulnerability of the set_add_routing() function in the internet.cgi script of the Wavlink AC3000 (WL-WN533A8) router microprogramming system allows a hacker to execute arbitrary commands.
The vulnerability of the setaddrouting function in the internet.cgi script of the Wavlink AC3000 WL-WN533A8 router microprogramming system is related to the lack of data cleaning at the control level when processing the netmask parameter. Exploiting this vulnerability allows a remote attacker to...
CVE-2025-0561 itsourcecode Farm Management System add-pig.php sql injection
A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-pig.php. The manipulation of the argument pigno leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-0561
The CVE-2025-0561 entries describe a SQL injection in itsourcecode Farm Management System 1.0, caused by unsafely handling the pigno parameter in the /add-pig.php file. The vulnerability is remote-exploitable, with at least one publicly disclosed exploit. Multiple sources confirm the affected sof...
PT-2025-3954 · Itsourcecode · Itsourcecode Farm Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Farm Management System version 1.0 Description: A critical issue has been found in the itsourcecode Farm Management System, affecting the unknown code of the file /add-pig.php. The manipulation of the pigno argument leads to SQL...
PT-2025-1825 · WordPress · Wp Hotel Booking
Name of the Vulnerable Software and Affected Versions: WP Hotel Booking plugin for WordPress versions up to and including 2.1.5 Description: The issue allows unauthorized modification of data due to a missing capability check when adding rooms. This makes it possible for unauthenticated attackers...
CVE-2025-23895
Cross-Site Request Forgery CSRF vulnerability in Dan Cameron Add RSS add-rss allows Stored XSS.This issue affects Add RSS: from n/a through = 1.5...
CVE-2025-23623
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on cf7-cc-avenue-add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through = 1.0...
CVE-2025-23623
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on cf7-cc-avenue-add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through = 1.0...
CVE-2025-23471
Cross-Site Request Forgery CSRF vulnerability in etemplates ECT Add to Cart Button ect-add-to-cart-button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through = 1.4...
CVE-2025-23895 WordPress Add RSS plugin <= 1.5 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Dan Cameron Add RSS add-rss allows Stored XSS.This issue affects Add RSS: from n/a through = 1.5...
CVE-2025-23895 WordPress Add RSS plugin <= 1.5 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Dan Cameron Add RSS add-rss allows Stored XSS.This issue affects Add RSS: from n/a through = 1.5...
CVE-2025-23895
CVE-2025-23895: CSRF to Stored XSS in the WordPress Add RSS plugin (Add RSS) allows Stored XSS. Affected: Add RSS plugin (WordPress) up to version 1.5. Root cause: CSRF enabling stored XSS in RSS feed handling. Exploitation details are not provided in the documents. Remediation status: patch/stat...
CVE-2025-23623 WordPress Contact Form 7 – CCAvenue Add-on plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through 1.0...
CVE-2025-23623
CVE-2025-23623 affects Contact Form 7 – CCAvenue Add-on (WordPress). Root cause: improper input neutralization during web page generation, allowing Reflected XSS. Documents show CVSS v3.1 base score 7.1 (HIGH). Connected sources confirm the vulnerability name and scope but provide no remediation ...
CVE-2025-23471
CVE-2025-23471 describes a CSRF weakness in the ECT Add to Cart Button (Andy Chapman) that can lead to Stored XSS. Affected product: ECT Add to Cart Button; affected range: up to version 1.4 (from n/a through 1.4). Connected sources confirm the same description but do not provide technical detail...
CVE-2025-23471 WordPress ECT Add to Cart Button plugin <= 1.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Andy Chapman ECT Add to Cart Button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through 1.4...
CVE-2025-23471 WordPress ECT Add to Cart Button plugin <= 1.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in etemplates ECT Add to Cart Button ect-add-to-cart-button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through = 1.4...
