PT-2025-50066

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in p-themes Porto Theme - Functionality porto-functionality allows Stored XSS.This issue affects Porto Theme - Functionality: from n/a through = 3.6.2...

PT-2024-12669 · Unknown · Directorypress

Name of the Vulnerable Software and Affected Versions: DirectoryPress versions 3.6.2 and earlier Description: The issue is related to a missing authorization vulnerability in Designinvento DirectoryPress, which allows exploiting incorrectly configured access control security levels. This problem...

PT-2024-26605 · Kivicare · Kivicare

Name of the Vulnerable Software and Affected Versions: KiviCare versions 3.6.2 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in KiviCare. This vulnerability allows for unauthorized access. Recommendations: For versions 3.6.2 and...

PT-2024-24786 · Unknown · Thingsboard

Name of the Vulnerable Software and Affected Versions: ThingsBoard versions up to 3.6.2 Description: A problematic issue was found in the AdvancedFeature component, leading to improper access controls. The attack can be initiated remotely. The issue affects unknown code and may be exploited. The...