5131 matches found
Cross site scripting
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-28367
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-27926
Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-28367
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-27926
Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-28367
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...
PT-2023-21676 · Unknown · Vk All In One Expansion Unit
Name of the Vulnerable Software and Affected Versions: VK All in One Expansion Unit versions 9.88.1.0 and earlier Description: A cross-site scripting issue in the CTA post function allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For versions 9.88.1.0 and...
VK All in One Expansion Unit 跨站脚本漏洞
VK All in One Expansion Unit is a plugin from Vektor for extending and enhancing the functionality of your website, which provides several functional modules and tools to help webmasters easily add a variety of features and functionality. A security vulnerability exists in VK All in One Expansion...
CVE-2023-27926
CVE-2023-27926 affects VK All in One Expansion Unit (VK AIO) up to version 9.88.1.0. The vulnerability is a cross-site scripting issue in the Profile setting function that can allow a remote authenticated attacker to inject arbitrary scripts. Several connected sources corroborate the issue and ci...
CVE-2023-28367
CVE-2023-28367 affects VK All in One Expansion Unit (WordPress plugin) up to version 9.88.1.0. The issue is a cross-site scripting (XSS) vulnerability in the CTA post function that could allow a remote authenticated attacker to inject arbitrary script. Root cause details are not fully enumerated ...
kernel: Executable Space Protection Bypass
A vulnerability was found in the Linux kernel when certain binary files have the exec-all attribute with gcc. This issue can cause the execution of bytes located in the non-executable regions of a file...
kernel: Executable Space Protection Bypass
A vulnerability was found in the Linux kernel when certain binary files have the exec-all attribute with gcc. This issue can cause the execution of bytes located in the non-executable regions of a file...
CVE-2023-2647
A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroot/inc/utilityall.php of the component File Upload Handler. The manipulation leads to command injection. The attack may be launched remotely. The...
Weaver E-Office 命令注入漏洞
Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A command injection vulnerability exists in Weaver E-Office version 9.5, which stems from a problem in the file /webroot/inc/utilityall.php that can lead to command injection...
CVE-2022-27856
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Atlas Gondal Export All URLs plugin = 4.1 versions...
CVE-2022-27856
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Atlas Gondal Export All URLs plugin = 4.1 versions...
CVE-2022-27856
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Atlas Gondal Export All URLs plugin = 4.1 versions...
Cross site scripting
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Atlas Gondal Export All URLs plugin = 4.1 versions...
CVE-2022-27856 WordPress Export All URLs Plugin <= 4.1 is vulnerable to Cross Site Scripting (XSS)
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Atlas Gondal Export All URLs plugin = 4.1 versions...