Lucene search
+L

228 matches found

NVD
NVD
•added 2025/04/09 5:15 p.m.•24 views

CVE-2025-32492

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eliot Akira Admin Menu Post List admin-menu-post-list allows Stored XSS.This issue affects Admin Menu Post List: from n/a through = 2.0.7...

5.9CVSS0.00401EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/09 4:09 p.m.•9 views

CVE-2025-32492 WordPress Admin Menu Post List <= 2.0.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eliot Akira Admin Menu Post List allows Stored XSS. This issue affects Admin Menu Post List: from n/a through 2.0.7...

5.9CVSS5.7AI score0.00401EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/09 4:09 p.m.•35 views

CVE-2025-32492 WordPress Admin Menu Post List plugin <= 2.0.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eliot Akira Admin Menu Post List admin-menu-post-list allows Stored XSS.This issue affects Admin Menu Post List: from n/a through = 2.0.7...

5.9CVSS0.00401EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/09 4:09 p.m.•59 views

CVE-2025-32492

CVE-2025-32492 is an authenticated, stored XSS vulnerability in the WordPress plugin Admin Menu Post List (affected: Admin Menu Post List

5.9CVSS7.2AI score0.00401EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•0 views

CVE-2025-32492: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eliot Akira Admin Menu Post List admin-menu-post-list allows Stored XSS.This issue affects Admin Menu Post List: from n/a through = 2.0.7...

5.9CVSS5.8AI score0.00401EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/07 3:15 a.m.•16 views

CVE-2025-3333

A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menuupdate.php. The manipulation of the argument menu leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score0.00555EPSS
SaveExploits1References4
OSV
OSV
•added 2025/04/07 3:15 a.m.•12 views

CVE-2025-3332

A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/menusave.php. The manipulation of the argument menu leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS6.9AI score0.00595EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/04/07 12:00 a.m.•12 views

Online Restaurant Management System SQL注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system . Online Restaurant Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the /admin/menusave.php file improper handling of the parameter menu, which may...

9.8CVSS7.9AI score0.00595EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/04/07 12:00 a.m.•17 views

Code-Projects Online Restaurant Management System 注入漏洞

Code-Projects Online Restaurant Management System is a Code-Projects open source online restaurant management system. Code-Projects Online Restaurant Management System version 1.0 suffers from an injection vulnerability that originates from improper handling of the parameter menu in the...

9.8CVSS7.9AI score0.00555EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/02/28 1:25 p.m.•15 views

CVE-2025-26925

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS8.5AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/26 2:15 p.m.•10 views

CVE-2025-26925

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/26 1:21 p.m.•73 views

CVE-2025-26925

CVE-2025-26925 is a CSRF vulnerability in the WordPress plugin Admin Menu Manager, affecting versions up to and including 1.0.3. The provided documents confirm the issue as a CSRF in Admin Menu Manager, but do not supply concrete exploitation details, affected product/version matrix beyond the 1....

4.3CVSS8.5AI score0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/26 1:21 p.m.•5 views

CVE-2025-26925 WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS8.5AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/26 1:21 p.m.•25 views

CVE-2025-26925 WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS0.00171EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/26 1:17 p.m.•16 views

WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Admin Menu Manager versions = 1.0.3...

4.3CVSS7AI score0.00171EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•11 views

WordPress plugin Admin Menu Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.3AI score0.00171EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•2 views

CVE-2025-26925: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS5.8AI score0.00171EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•17 views

PT-2025-8693 · Unknown · Admin Menu Manager

Name of the Vulnerable Software and Affected Versions: Admin Menu Manager versions 1.0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

4.3CVSS9.4AI score0.00171EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/24 3:31 p.m.•72 views

CVE-2025-0698

CVE-2025-0698 affects JoeyBling bootplus, with a SQL injection in the internal endpoint /admin/sys/menu/list caused by manipulating the sort/order parameter. The vulnerability is exploitable remotely and has publicly disclosed exploits. Affected is an unknown function within the file; no version ...

8.8CVSS7.3AI score0.00423EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2025/01/24 3:31 p.m.•47 views

CVE-2025-0698 JoeyBling bootplus list sql injection

A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown function of the file /admin/sys/menu/list. The manipulation of the argument sort/order leads to sql injection. It is possible to launch the...

6.5CVSS0.00423EPSS
SaveExploits0References5
Rows per page
Query Builder