115801 matches found
CVE-2026-84259 click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin...
CVE-2026-84259
The click5 CRM add-on for the WPForms WordPress plugin (versions through 1.0.3 ) is vulnerable to Stored XSS . The root cause is a failure to sanitize and escape content submitted via an unauthenticated endpoint before it is displayed on an admin page. This flaw allows an attacker to execute mali...
CVE-2026-84260 click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin...
CVE-2026-84258 click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via post_notifications
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin...
CVE-2026-84258
The click5 CRM add-on for the Ninja Forms WordPress plugin (versions up to and including 1.0.1 ) is vulnerable to Stored XSS . The flaw exists because the application fails to properly sanitize and escape content submitted through an unauthenticated endpoint before displaying it on an admin page....
CVE-2026-84258 click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via post_notifications
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin...
Exchange2domain
Exchange2domain Herramientas todo en uno de privexchange. Solo necesitas abrir el puerto del servidor web, por lo que no se requieren privilegios elevados. ¡Gran artículo! Abusando de Exchange: una sola llamada a la API te separa de Domain Admin. Requisitos Estas herramientas requieren impacket...
PT-2026-110182
🚨 CVE-2026-108863 Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /config dump endpoint to read configured...
PT-2026-110121
Name of the Vulnerable Software and Affected Versions Rill versions 0.77.0 through 0.90.5 Description The admin OAuth server fails to properly authorize requests, allowing the issuance of authorization codes to dynamically registered clients without requiring user consent. An attacker can registe...
CVE-2026-108753: Use of Hard-coded Credentials
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and...
CVE-2026-108863: Missing Authentication for Critical Function
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...
CVE-2026-108718: Missing Authorization
Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the longlivedaccesstoken scope and lure a user to an authorization link,...
PT-2026-110155
Name of the Vulnerable Software and Affected Versions Agnaistic agnai versions prior to 1.0.556 Description The self-hosted deployment configuration contains hard-coded credentials within the self-host.docker-compose.yml file, specifically a fixed administrator password and a public JSON Web Toke...
CVE-2026-84260: Improper Neutralization of Input During Web Page Generation
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin...
PT-2026-110034
Name of the Vulnerable Software and Affected Versions click5 CRM add-on to Contact Form 7 WordPress plugin versions prior to 1.0.5 Description An unauthenticated endpoint fails to sanitize and escape submitted content before it is displayed on an administrative page. This leads to Stored Cross-Si...
CVE-2026-84259: Improper Neutralization of Input During Web Page Generation
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin...
CVE-2026-84261: Improper Neutralization of Input During Web Page Generation
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin...
CVE-2026-108663
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications. Low-privileged attackers can send PUT requests with chosen tenantId, packId and userId values to...
