The vulnerability of Microsoft Copilot Studio, a graphical tool for creating and supporting artificial intelligence, relates to insufficient data cleaning at the management level. This vulnerability allows an attacker to disclose protected information.

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

WordPress plugin AhaChat Messenger Marketing has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

WordPress Plugin Alpha Blocks has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Thread Redirect plugin for MyBB – Cross-site scripting vulnerabilities

The Thread Redirect plugin for MyBB is a plugin developed by Jamie Sage, an individual developer. The Thread Redirect plugin for MyBB version 0.2.1 has a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of custom text input fields, which may lead to cross-site...

WordPress Plugin RSS Aggregator Cross-Site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PEEL Shopping has a security vulnerability

PEEL Shopping is an e-commerce platform owned by the French company PEEL. Version 9.3.0 of PEEL Shopping contains a security vulnerability. This vulnerability stems from improper cleaning of the address parameter in the changeparams.php script, which may lead to storage-based cross-site scripting...

WordPress Plugin: Schema & Structured Data for WP & AMP – Cross-Browser Script Vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

GetSimple CMS cross-site scripting vulnerability

GetSimple CMS is an open-source content management system developed by GetSimple CMS. Version 1.1.2 of GetSimple CMS contains a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning and escaping of characters, which may lead to storage-based cross-site scripting...

WordPress plugin Head Meta Data: Cross-site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

The vulnerability of the setDiagnosisCfg() function in the microprogramming software of TOTOLINK LR350 allows a intruder to execute arbitrary commands.

The vulnerability of the setDiagnosisCfg function in TOTOLINK LR350 router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The system’s vulnerability for data collection and automation process control in Delta Electronics DIAView, due to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Delta Electronics DIAView system for data collection and automation process control is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows attackers to execute arbitrary commands...

Altium Forum security vulnerabilities

Altium Forum is an online community operated by Altium Corporation in the United States. There is a security vulnerability in Altium Forum, which stems from insufficient input cleaning on the server side. This vulnerability may lead to storage-based cross-site scripting attacks...

ESM.sh path traversal vulnerability

esm.sh is an open-source content distribution network developed by esm.sh. esm.sh has a path traversal vulnerability; this vulnerability stems from incomplete path cleaning, which may lead to path traversal...

WordPress plugin: Integrating Dynamics 365 CRM – Cross-site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

WordPress Plugin: RSS Aggregator – Includes RSS Import, News Feeds, Feed to Post, and Autoblogging. Cross-site scripting vulnerabilities.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

WordPress plugin User Submitted Posts cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

Altium 365 security vulnerabilities

Altium 365 is a product design and development platform provided by the American company Altium. There is a security vulnerability in Altium 365, which stems from insufficient server-side cleaning of input data in the user profile text field. This vulnerability may lead to storage-side cross-site...

The vulnerability of the application agent for automatic updating of Docker containers, Tugtainer, allows a malicious actor to execute arbitrary commands.

The vulnerability of the Docker container automation application Tugtainer relates to the lack of data cleaning at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted POST request...

Sonatype Nexus Repository 安全漏洞

Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype Nexus Repository that stems from insufficient cleaning and escaping of request parameters, which could lead...

The vulnerability of the HTTP Handler component of the /goform/set_hidessid_cfg file in the microprogramming-based routing software for LB-LINK allows a attacker to execute arbitrary commands.

The vulnerability of the HTTP Handler component in the /goform/sethidessidcfg file of the LB-LINK router microprogramming system is related to the lack of data cleaning at the management level when processing the enable parameter. Exploiting this vulnerability allows a remote attacker to execute...