7934 matches found
CVE-2023-2399 qubotchat < 1.1.6 - Unauthenticated Stored XSS
The QuBot WordPress plugin before 1.1.6 doesn't filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard...
PT-2023-19340 · WordPress · Qubot
Name of the Vulnerable Software and Affected Versions: QuBot WordPress plugin versions prior to 1.1.6 Description: The issue concerns the QuBot WordPress plugin, where it fails to filter user input on chat. This allows malicious code to be inserted and reflected on the user dashboard...
Anonymous Sudan, MOVEit, and Cl0p
There are three concurrent events of significant concern: 1. An Anonymous Sudan group chat on Telegram has revealed imminent threats from Russia to the US financial system, specifically targeting the SWIFT network. The motive behind this attack is disruption. By attacking SWIFT and inducing...
CVE-2023-28598
Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash...
CVE-2023-28598
Zoom Client for Linux versions prior to 5.13.10 are affected by an HTML-injection vulnerability that can crash the Zoom application when a user initiates a chat with a malicious contact. The issue is documented across multiple sources (official Zoom security bulletin, Red Hat advisory, OpenVAS/Ne...
CVE-2023-26538
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kamyabsoft Chat Bee plugin = 1.1.0 versions...
CVE-2023-26538
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kamyabsoft Chat Bee plugin = 1.1.0 versions...
CVE-2023-26538 WordPress Chat Bee Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kamyabsoft Chat Bee plugin = 1.1.0 versions...
CVE-2023-26538 WordPress Chat Bee Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kamyabsoft Chat Bee plugin = 1.1.0 versions...
CVE-2023-26538
CVE-2023-26538 is a Stored XSS in the Kamyabsoft Chat Bee WordPress plugin, affecting versions prior to 1.1.0. The vulnerability requires authentication with admin+ privileges and originates from how input is stored/executed in the plugin. Affected software: Kamyabsoft Chat Bee plugin (WordPress)...
WordPress Plugin Kamyabsoft Chat Bee 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Jeecg P3 Biz Chat allows remote attackers to read arbitrary files
Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters...
GHSA-V3V9-3JF4-5PXX Jeecg P3 Biz Chat allows remote attackers to read arbitrary files
Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters...
CVE-2023-33510
Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters...
CVE-2023-33510
Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters...
CVE-2023-33510
Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters...
Code injection
Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters...
Jeecg P3 Biz Chat 安全漏洞
Jeecg P3 Biz Chat is a Jeecg open source online chat plugin. A security vulnerability exists in Jeecg P3 Biz Chat version 1.0.5, which originated from a vulnerability that allows remote attackers to read arbitrary files via specific parameters...
PT-2023-6977 · WordPress · Jeecg P3 Biz Chat
Name of the Vulnerable Software and Affected Versions: Jeecg P3 Biz Chat version 1.0.5 Description: The issue is related to the disclosure of information in the error data area of the Jeecg P3 Biz Chat plugin for WordPress content management systems. Exploitation of this issue may allow a remote...