33 matches found
CVE-2026-4121: Cross-Site Request Forgery (CSRF)
The Kcaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1. This is due to missing nonce validation in the plugin's settings page handler admin/setting.php. The settings form does not include a wpnoncefield and the form processing code...
CVE-2025-60447: Improper Neutralization of Input During Web Page Generation
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...
CVE-2024-5043
A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/setting.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2024-5043
A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/setting.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2024-5043: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/setting.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be...
PT-2024-34204
Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.3.4 Description: A critical issue affects some unknown functionality of the file admin/setting.php, leading to unrestricted upload. The attack may be launched remotely. The estimated number of potentially affected devices...
CVE-2021-42866
A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.php...
Cross site scripting
A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.php...
PT-2022-11718
Name of the Vulnerable Software and Affected Versions Pixelimity version 1.0 Description A Cross Site Scripting issue exists in the software via the Site Description field in the "pixelimity/admin/setting.php" endpoint. Recommendations For Pixelimity version 1.0, consider disabling the Site...
CVE-2021-42866: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.php...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php...
CVE-2021-29056
Cross Site Scripting XSS vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php...
CVE-2021-29056
Cross Site Scripting XSS vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php...
CVE-2021-29056
Pixelimity 1.0 is affected by a Cross Site Scripting (XSS) vulnerability that can be triggered via an HTTP POST parameter to admin/setting.php. The root cause is a lack of proper validation/sanitization of client-side data in the web app. The impact is client-side code execution, potentially affe...
PT-2021-18052
Name of the Vulnerable Software and Affected Versions: Pixelimity version 1.0 Description: A Cross Site Scripting XSS issue exists, allowing potential attacks via the HTTP POST parameter to the "admin/setting.php" endpoint. This could enable malicious scripts to be executed on the client-side...
CVE-2021-29056: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php...
Pixelimity 1.0 - 'password' Cross-Site Request Forgery
Exploit Title: Pixelimity 1.0 - 'password' Cross-Site Request Forgery Date: 2020-06-03 Exploit Author: Noth Vendor Homepage: https://github.com/pixelimity/pixelimity Software Link: https://github.com/pixelimity/pixelimity Version: v1.0 CVE : 2020-23522 Pixelimity 1.0 has cross-site request forger...
Pixelimity 1.0 Cross Site Request Forgery
Exploit Title: Pixelimity 1.0 - 'password' Cross-Site Request Forgery Date: 2020-06-03 Exploit Author: Noth Vendor Homepage: https://github.com/pixelimity/pixelimity Software Link: https://github.com/pixelimity/pixelimity Version: v1.0 CVE : 2020-23522 Pixelimity 1.0 has cross-site request forger...