CVE-2023-24387: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPdevart Organization chart plugin = 1.4.4 versions...

CVE-2023-23981: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in QuantumCloud Conversational Forms for ChatBot plugin = 1.1.6 versions...

CVE-2023-23870

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in wpdevart Responsive Vertical Icon Menu plugin = 1.5.8 versions...

CVE-2022-47170: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin = 1.5.48 versions...

CVE-2023-25456: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Klaviyo, Inc. Klaviyo plugin = 3.0.7 versions...

CVE-2022-40694: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in News Announcement Scroll plugin = 8.8.8 on WordPress...

CVE-2022-44586: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS in Ayoub Media AM-HiLi plugin = 1.0 on WordPress...

CVE-2021-36858: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themepoints Testimonials plugin = 2.6 on WordPress...

CVE-2022-40311: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress...

CVE-2021-36827: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saturday Drive's Ninja Forms Contact Form plugin = 3.6.9 at WordPress via "label"...

PT-2022-14906

Name of the Vulnerable Software and Affected Versions EC-CUBE plugin 'Mail Magazine Management Plugin' versions 4.0.0 through 4.1.1 for EC-CUBE 4 series EC-CUBE plugin 'Mail Magazine Management Plugin' versions 1.0.0 through 1.0.4 for EC-CUBE 3 series Description A cross-site request forgery CSRF...

CVE-2019-17431

An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...

PT-2019-15152

Name of the Vulnerable Software and Affected Versions fastadmin version 1.0.0.20190705 beta Description An issue was discovered in the software, specifically a CSRF vulnerability in the public/index.php/admin/auth/admin/add endpoint. Recommendations For fastadmin version 1.0.0.20190705 beta, as a...

CVE-2019-17431: Cross-Site Request Forgery (CSRF)

An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerability...

Design/Logic Flaw

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie admin-auth is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router...

PT-2019-18521

Name of the Vulnerable Software and Affected Versions Linksys WRT1900ACS version 1.0.3.187766 Description The issue concerns a lack of encryption in storing the user login cookie, specifically the admin-auth cookie, which contains the admin password in base64 cleartext. This allows a local attack...

CVE-2019-7311: Missing Encryption of Sensitive Data

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie admin-auth is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router...

PT-2019-12166

Name of the Vulnerable Software and Affected Versions FastAdmin version 1.0.0.20190111 beta Description The issue allows for a CSRF attack to add a new admin user via the "admin/auth/admin/add?dialog=1" API endpoint. Recommendations For FastAdmin version 1.0.0.20190111 beta, as a temporary...

CVE-2019-11077: Cross-Site Request Forgery (CSRF)

FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...

PT-2015-6737

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0 through 6.0.1.x before 6.0.1.10 IBM UrbanCode Deploy versions 6.1.1.x before 6.1.1.8 Description The issue allows remote authenticated users to gain privileges by leveraging the ability to create and execute a...