230 matches found
CVE-2024-53499
Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API...
PT-2025-34471 · Jeewms · Jeewms
Name of the Vulnerable Software and Affected Versions: Jeewms version 3.7 Description: Jeewms version 3.7 contains a SQL injection vulnerability via the CgReportController API. The vulnerability is located in the CgReportController API endpoint. Recommendations: At the moment, there is no...
Malicious code in queue-consumer-cg (npm)
The package queue-consumer-cg was found to contain malicious code...
MAL-2025-12604 Malicious code in @zalastax/nolb-node-cg (npm)
The package @zalastax/nolb-node-cg was found to contain malicious code...
MAL-2025-31290 Malicious code in queue-consumer-cg (npm)
The package queue-consumer-cg was found to contain malicious code...
VulnCheck KEV: CVE-2025-34141
A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...
GHSA-5662-CV6M-63WH vulnerabilities
Vulnerabilities for packages: cg...
CVE-2025-54059 vulnerabilities
Vulnerabilities for packages: cg...
CVE-2025-34141
A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...
CVE-2025-34141
A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...
CVE-2025-34141
A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...
CVE-2025-34141 ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`
A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...
CVE-2025-34141
ETQ Reliance CG (legacy) is affected by a reflected XSS in the SQLConverterServlet. The vulnerability requires user interaction (e.g., clicking a crafted link) and could execute scripts in the authenticated user’s browser. The servlet was unnecessarily exposed to authenticated users and has been ...
CVE-2025-34141 ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`
A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...
ETQ Reliance CG 安全漏洞
ETQ Reliance CG is a quality management system from ETQ Corporation. A security vulnerability exists in ETQ Reliance CG that originates from the ability to log in as a privileged internal SYSTEM user by bypassing authentication through manipulation of the username field, which could lead to remot...
CVE-2025-31399
Cross-Site Request Forgery CSRF vulnerability in Chandan Garg CG Scroll To Top cg-scroll-to-top allows Stored XSS.This issue affects CG Scroll To Top: from n/a through = 3.5...
WordPress CG Scroll To Top plugin <= 3.5 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin CG Scroll To Top versions = 3.5...
CVE-2025-31399
Cross-Site Request Forgery CSRF vulnerability in Chandan Garg CG Scroll To Top cg-scroll-to-top allows Stored XSS.This issue affects CG Scroll To Top: from n/a through = 3.5...
CVE-2025-31399
Technical details about CVE-2025-31399 (CG Scroll To Top) are not provided in the connected documents. Public details appear reserved/no details in the supplied sources. Monitor for updates and potential public disclosures as more information becomes available.
PT-2025-15750 · Chandan Garg · Cg Scroll To Top
Name of the Vulnerable Software and Affected Versions: Chandan Garg CG Scroll To Top versions n/a through 3.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...