CSPTPlayground

Client-Site Path Traversal プレイグラウンド !Doyensec Research...

WordPress SureFeedback Client Site plugin has a vulnerability related to information leakage

The WordPress SureFeedback Client Site plugin is a plugin that allows customers to leave visual feedback directly on their WordPress web pages. The WordPress SureFeedback Client Site plugin has a vulnerability related to information leakage, which stems from the exposure of sensitive data...

CVE-2026-80433

Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...

CVE-2026-80433

SureFeedback Client Site is a WordPress plugin vulnerable to Subscriber-level Sensitive Data Exposure in versions 1.2.12 and below . The CVSS 3.1 score is 7.5 (High) , with a network attack vector requiring no privileges or user interaction, and a high impact on confidentiality but no impact on i...

CVE-2026-80433 WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...

EUVD-2026-66948

Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...

CVE-2026-80433: Missing Authorization

Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...

PT-2026-82467

Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...

WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by doyz in WordPress Plugin SureFeedback Client Site versions = 1.2.12...

EUVD-2023-56097

Malicious code in bioql PyPI...

CVE-2023-51376

Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34...

CVE-2023-51376

Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34...

CVE-2023-51376 WordPress ProjectHuddle Client Site plugin <= 1.0.34 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34...

PT-2024-14099 · Brainstorm Force · Projecthuddle Client Site

Name of the Vulnerable Software and Affected Versions: ProjectHuddle Client Site versions 1.0.34 and earlier Description: The issue is related to a Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site. Recommendations: For versions 1.0.34 and earlier, update to a...

CVE-2023-51376: Missing Authorization

Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34...

WordPress ProjectHuddle Client Site Plugin <= 1.0.34 is vulnerable to Broken Access Control

Software ProjectHuddle Client Site Type Plugin Vulnerable versions = 1.0.34 Fixed in 1.0.35 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51376 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 662f316bbcd6 Credits Rafie...

Stored XSS on entire Client site

Description Admin or Staff with "System" permission can produce a store XSS on entire Client site Proof of Concept Edit the "Signature" field to this value "FOSSBilling.org - Client Management, Invoice and Support Software"" Then it will trigger in every Client screens Seems like it was rendered ...

Vicidial v2.14-783a - Multiple XSS Web Vulnerabilities

Document Title: =============== Vicidial v2.14-783a - Multiple XSS Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2311 Release Date: ============= 2022-10-10 Vulnerability Laboratory ID VL-ID: ==================================== 23...

OKI C5510MFP printers unauthroized access

Web interface password is checked on client site...

CVE-2000-0109: Undefined Security Weakness

The mcsp Client Site Processor system MultiCSP in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords...