905 matches found
Demososo DM Enterprise Website Building System License Issues Vulnerability
Demososo DM Enterprise Website Building System is a system website of Demososo Inc. An authorization issue vulnerability exists in Demososo DM Enterprise Website Building System version 2022.8 and earlier, which stems from a security issue in the dmlogin function of indexDMload.php in the compone...
CVE-2023-41283 QTS, QuTS hero, QuTScloud
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596...
CVE-2023-48652
Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery CSRF via /ccm/system/dialogs/logs/deleteall/submit. An attacker can force an admin user to delete server report logs on a web application to which they are currently authenticated...
CVE-2023-46355
In the module "CSV Feeds PRO" csvfeeds 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead t...
CVE-2023-22273
CVE-2023-22273 affects Adobe RoboHelp Server; the path traversal vulnerability in RoboHelp Server versions 11.4 and earlier could allow an admin-authenticated attacker to achieve remote code execution. Public sources confirm the issue as part of APSB23-53 (update to 11 Update 5). The connected do...
CVE-2023-36688
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Mann Simple Site Verify plugin = 1.0.7 versions...
CVE-2023-46199
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Triberr plugin = 4.1.1 versions...
CVE-2023-45833
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in LeadSquared Suite plugin = 0.7.4 versions...
CVE-2023-45832
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Martin Gibson WP GoToWebinar plugin = 14.45 versions...
CVE-2023-45768
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Stephanie Leary Next Page plugin = 1.5.2 versions...
CVE-2023-45644
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin = 1.0 versions...
CVE-2023-39924
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mitchell Bennis Simple File List plugin = 6.1.9 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kardi Order auto complete for WooCommerce plugin = 1.2.0 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPJohnny Comment Reply Email plugin = 1.0.3 versions...
CVE-2023-45056
Open User Map (WordPress plugin by 100plugins)
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Renzo Johnson Blocks plugin = 1.6.41 versions...
PT-2023-28100 · Unknown · Uniconsent Cmp
Name of the Vulnerable Software and Affected Versions: UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin versions prior to 1.4.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allo...
PT-2023-28068 · WordPress · Sendpress Newsletters
Name of the Vulnerable Software and Affected Versions: SendPress Newsletters plugin versions prior to 1.22.3.31 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker to inje...
Proofpoint Insider Threat Management Cross-Site Scripting Vulnerability
Proofpoint Insider Threat Management Proofpoint ITM is an insider threat management system from Proofpoint Inc. in the United States. A cross-site scripting vulnerability exists in Insider Threat Management versions prior to 7.14.3.69, which stems from the presence of a Reflected Cross-Site...