CVE-2026-110981

The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyon...

EUVD-2026-103399

The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyon...

UX365 website category navigation system v1.3.4ar***.php file has xss vulnerability

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the file ar.php in the Uke365 website category navigation system v1.3.4, which can be exploited by an attacker to obtain administrator...

xss vulnerability in uke365 website category navigation system v1.3.4fe***.html page

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the Uke365 Website Classifieds Navigation System v1.3.4fe.html page, which can be exploited by an attacker to obtain administrator...

xss vulnerability in uke365 website category navigation system v1.3.4ad***.html page

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the v1.3.4ad.html page of the Uke365 website category navigation system, which can be exploited by an attacker to obtain administrator...

UX365 website category navigation system v1.3.4we***.php file has xss vulnerability

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the file we.php in the Uke365 website category navigation system v1.3.4, which can be exploited by an attacker to obtain administrator...

SQL Injection Vulnerability in Uc365 Website Category Navigation System

Yuko 365 website classification navigation system is an open source navigation management system based on PHP + MYSQL development and construction. Uke365 website navigation system v1.1.3 app/admin/controller/ar.php page SQL injection vulnerability , the vulnerability stems from the system fails ...

SQL Injection Vulnerability in category.php of Ubiquitous 365 Website Category Navigation System

Uc365 website classification and navigation system is a cross-platform open source software , based on PHP + MYSQL development and construction of open source website classification and catalog management system . Uke365 website category navigation system category.php SQL injection vulnerability...

XSS Vulnerability in Ux365 Website Category Navigation System

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system XSS vulnerability , an attacker can use the...

Uc365 website category navigation system link_logo parameter exists sql injection vulnerability

Uke365 website category navigation system is a cross-platform open source software , based on PHP + MYSQL development and construction of open source website category management system . Uke365 website category navigation system linklogo parameters exist sql injection vulnerability , due to the...