12 matches found
EUVD-2024-36675
Malicious code in bioql PyPI...
EUVD-2023-49382
Malicious code in bioql PyPI...
CVE-2024-37454
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AWSM Innovations AWSM Team allows Path Traversal.This issue affects AWSM Team: from n/a through 1.3.1...
CVE-2023-23707
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', Unrestricted Upload of File with Dangerous Type vulnerability in Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files allows Stored XSS via upload of SVG and HTML files. This issue...
CVE-2023-45061
Missing Authorization vulnerability in awsm.in WP Job Openings wp-job-openings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Openings: from n/a through = 3.4.1...
CVE-2023-45061
Missing Authorization vulnerability in awsm.in WP Job Openings wp-job-openings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Openings: from n/a through = 3.4.1...
CVE-2023-45061 WordPress WP Job Openings plugin <= 3.4.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in awsm.in WP Job Openings wp-job-openings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Openings: from n/a through = 3.4.1...
CVE-2023-45061 WordPress WP Job Openings plugin <= 3.4.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in awsm.in WP Job Openings wp-job-openings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Openings: from n/a through = 3.4.1...
CVE-2023-45061
CVE-2023-45061 affects the WordPress plugin WP Job Openings (versions <= 3.4.1). The vulnerability is a Missing Authorization / Broken Access Control issue, exploitable by unauthenticated users due to incorrectly configured access control. Patchstack documentation confirms the issue is low sev...
CVE-2024-37454
CVE-2024-37454 : AWSM Team – Team Showcase Plugin (WordPress) is affected by an authenticated (Contributor+) Local File Inclusion vulnerability up to version 1.3.1. The issue allows path traversal to access restricted local files. The vulnerability entry is active in public advisories and is trac...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', Unrestricted Upload of File with Dangerous Type vulnerability in Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files allows Stored XSS via upload of SVG and HTML files. This issue...
PT-2023-19146 · Awsm Innovations · Awsm Innovations Embed Any Document – Embed Pdf
Name of the Vulnerable Software and Affected Versions: Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin versions = 2.7.1 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. It...