CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload

A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avatar leads to unrestricted upload. It i...

PT-2024-37997 · Itsourcecode · Itsourcecode University Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode University Management System version 1.0 Description: A critical issue was found in the Avatar File Handler component of the itsourcecode University Management System, specifically affecting the file /st update.php. The...

PT-2024-37984 · Flute Cms · Flute Cms

Name of the Vulnerable Software and Affected Versions: Flute CMS version 0.2.2.4-alpha Description: A critical issue affects the Avatar Upload Page component, specifically the file app/Core/Http/Controllers/Profile/ImagesController.php. The manipulation of the avatar argument leads to unrestricte...

Malicious code in sap-avatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f3113f42edb287829ad90e0236360631d23f7feb81854cd2715ee7f17c6b13f The OpenSSF Package Analysis project identified 'sap-avatar' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-3857 Malicious code in watch-avatar-the-way-of-water-movie-online-free-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in watch-avatar-the-way-of-water-movie-online-free-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3131 Malicious code in to-watch-avatar-2-the-way-of-water-full-online-stream04 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in to-watch-avatar-2-the-way-of-water-full-online-stream04 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cuevana-ver_avatar_2_2022_pelicula_completa_online_en_espanol_hdd (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2044 Malicious code in cuevana-ver_avatar_2_2022_pelicula_completa_online_en_espanol_hdd (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bunker-avatar (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Save as PDF plugin < 3.2.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Avatar Mitul Kumar in WordPress Plugin Save as PDF versions 3.2.0...

The vulnerability of the “Avatar” module in the WordPress content management system allows a hacker to gain access to read, modify, or delete data, thereby executing XSS attacks.

The vulnerability of the “Avatar” module in the WordPress content management system is related to the failure to protect the website structure when processing parameters like commentauthor and authorname. This occurs due to incorrect execution of the function sequence. Exploiting this vulnerabili...

BIT-WORDPRESS-2024-4439

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

BIT-WORDPRESS-MULTISITE-2024-4439

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

CVE-2024-4439

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

DEBIAN-CVE-2024-4439

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

UBUNTU-CVE-2024-4439

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...