10 matches found
CVE-2026-68529
Concrete CMS 9.0.0 through 9.5.2 was missing an authorization check on the Express entries advanced-search dashboard action. The advancedsearch method in DashboardSelectableExpressEntryListTrait resolved an Express entity directly from a user-supplied entity ID and rendered that entity's entries...
Malicious code in blacklight-advanced_search (RubyGems)
--- Credit: OpenSSF source...
CVE-2026-13253: Improper Neutralization of Input During Web Page Generation
The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions up to and including 5.0.31. This is due to insufficient input sanitization and output escaping in the...
Malicious code in blacklight-advanced_search (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6783 Malicious code in blacklight-advanced_search (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious Package
Overview blacklight-advancedsearch is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...
skladtorg.ru XSS vulnerability
Vulnerable URL: http://skladtorg.ru/advancedsearch.php?errorno=10000000="'/alert/openbugbounty/...
ro.mt.com XSS vulnerability
Vulnerable URL: http://ro.mt.com/ro/en/home/search/AdvancedSearch.html?q=Humid...
shop.tonychachere.com XSS vulnerability
Vulnerable URL: http://shop.tonychachere.com/advancedsearch.php?errorno=10000000=%22%3E%3Csvg%2Fonload%3Dalert%28%2Fxssposed.org%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
