700 matches found
CVE-2022-44070
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...
Cross site scripting
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...
CVE-2022-44070
Zenario CMS 9.3.57186 contains a Cross-Site Scripting (XSS) vulnerability in the News articles feature. The CVE CVE-2022-44070 affects Zenario CMS 9.3.57186, with XSS via News articles as described across multiple sources. The documentation does not provide an explicit root-cause detail or a conf...
PT-2022-27098 · Unknown · Zenario Cms
Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.3.57186 Description: The issue is related to Cross Site Scripting XSS via News articles. This means that an attacker could potentially inject malicious scripts into news articles, which could then be executed by users'...
Zenario CMS 跨站脚本漏洞
Zenario CMS is a Zenario open source application . Provides a Web-based content management system . A cross-site scripting vulnerability exists in Zenario CMS version 9.3.57186, which can be exploited by attackers to conduct cross-site scripting XSS attacks via the News articles module...
CVE-2022-44070
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...
CVE-2022-44070
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...
CVE-2022-44070
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...
phpfusion 授权问题漏洞
PHPFusion is a Malaysian PHPFusion company based on MySql and PHP open source lightweight content management system . The system contains modules for news, articles and forums. A security vulnerability exists in PHPFusion versions prior to 9.10.20, which stems from an unverified password change...
What’s New for Developers: June 2022
Read about our recent Terraform updates and managed database services, our latest Meet the Developer articles, and stream videos on edge computing...
WordPress PDF24 Articles To PDF plugin跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress PDF24 Articles To PDF plugin 4.2.2 and earlier versions have a cross-site request forgery...
WordPress PDF24 Articles To PDF Cross-site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin PDF24 Articles To PDF 4.2.2 and earlier versions are vulnerable to cross-site reques...
Malicious code in facebook-instant-articles-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc02fad01d5fe01830bef43af8b315de5fd60147c4672a02553c59534c93b2f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2960 Malicious code in facebook-instant-articles-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc02fad01d5fe01830bef43af8b315de5fd60147c4672a02553c59534c93b2f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1828
The PDF24 Articles To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2022-1828
The PDF24 Articles To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
Cross site request forgery (csrf)
The PDF24 Articles To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
WordPress plugin PDF24 Articles To PDF 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin PDF24 Articles To PDF 4.2.2 and earlier versions are vulnerable to cross-site reques...
WordPress plugin PDF24 Articles To PDF 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress PDF24 Articles To PDF plugin 4.2.2 and earlier versions have a cross-site request forgery...
CVE-2022-27174
Cross-site request forgery CSRF vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page...