CVE-2023-2122

The CVE-2023-2122 entry concerns the Image Optimizer by 10web WordPress plugin (versions up to 1.0.26). It is vulnerable to a reflected XSS via the iowd_tabs_active parameter, which is sanitized/escaped insufficiently before rendering in the plugin admin panel. Impact is that an attacker could lu...

DigaSell Digital Store PHP Script 1.0.0 SQL Injection

==================================================================================================================================== | Title : DigaSell - Digital store PHP Script V1.0.0 Blind Sql Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...

CVE-2023-39112

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel...

CVE-2023-39112

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel...

CVE-2023-39112

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel...

Arbitrary file deletion

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel...

ShopeX ECShop Authorization Issues Vulnerability

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall , source code free download experience , suitable for enterprise development and build mall. ECShop v4.1.16 version of a security vulnerability , the vulnerabilit...

CVE-2023-39112

ECShop v4.1.16 has an arbitrary file deletion vulnerability in the Admin Panel (CVE-2023-39112). Public sources confirm the affected product/version and impact on integrity and availability, with CVSS 3.1 metrics: I:H, A:H, C:N; no details on root cause in the provided documents. No exploitation ...

PT-2023-26787 · Ecshop · Ecshop

Name of the Vulnerable Software and Affected Versions: ECShop version 4.1.16 Description: The issue is related to an arbitrary file deletion vulnerability in the Admin Panel. Recommendations: For ECShop version 4.1.16, at the moment, there is no information about a newer version that contains a f...

CVE-2023-39112

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

Cross site scripting

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

Barebones CMS Cross-Site Scripting Vulnerability

Barebones CMS is an open source software from Barebones CMS, Inc. A cross-site scripting vulnerability exists in Barebones CMS version v2.0.2, which stems from a cross-site scripting vulnerability in user interaction with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open...

MAL-2023-8007 Malicious code in @rocketrefer/admin-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cee4d7f564848bd4bb2a8a410f60f22ce1bce642072b14a97281130483c8c1a9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

Daimler Truck: Blind xss at https://homologation.omniplus.com/

Hello team, I have found a blind xss leads to admin panel exposed with cookie StepToReproduce 1- Navigate to https://homologation.omniplus.com/ 2- You will face a submit form contains 6 pages 3- At each input field you have to put your blind xss payload , for me I used xss.report just go there an...