XWiki >= 13.10.8 - Cross-Site Scripting Detection

Reflected XSS vulnerability in XWiki authenticate endpoints allows execution of arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """Reflected XSS vulnerability in XWiki authenticate endpoints allows execution of arbitrary JavaScript.""" from kittysploit import from...

PT-2021-11868 · WordPress · Aam Advanced Access Manager

Name of the Vulnerable Software and Affected Versions: Advanced Access Manager plugin versions prior to 6.6.2 Description: The issue arises when the Advanced Access Manager plugin for WordPress displays the unfiltered user object, including all metadata, upon login via the REST API at endpoints...