321 matches found
PT-2023-5318 · Acronis · Acronis Cloud Manager
Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to remote command execution due to improper input validation. This allows a remote attacker to execute arbitrary commands. Recommendations: For...
PT-2023-5315 · Acronis · Acronis Cloud Manager
Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to sensitive information disclosure due to unauthenticated path traversal and improper input validation. This allows a remote attacker to access...
PT-2023-5317 · Acronis · Acronis Cloud Manager
Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to remote command execution due to improper input validation. This allows a remote attacker to execute arbitrary commands. Recommendations: For...
Acronis Cloud Manager 输入验证错误漏洞
Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration, and recovery for Microsoft cloud environments of all shapes and sizes. A security vulnerability exists in Acronis Cloud Manager that originates from improper input validation...
Acronis Cloud Manager 输入验证错误漏洞
Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration, and recovery for Microsoft cloud environments of all shapes and sizes. A security vulnerability exists in Acronis Cloud Manager that originates from improper input validation...
Acronis Cloud Manager 输入验证错误漏洞
Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration, and recovery for Microsoft cloud environments of all shapes and sizes. Acronis Cloud Manager suffers from an input validation error vulnerability that stems from improper inpu...
WordPress Plugin Tags Cloud Manager Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Tags Cloud Manager, which is caused by improper validation of user-supplied...
CVE-2023-28166
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
CVE-2023-28166
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
CVE-2023-28166
CVE-2023-28166 affects the WordPress plugin Tags Cloud Manager (versions ≤ 1.0.0). It is an unauthenticated, reflected XSS vulnerability caused by improper validation of user input. Exploitation could lead to script execution in a victim’s browser. Remediation: update to a version later than 1.0....
CVE-2023-28166 WordPress Tags Cloud Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...
PT-2023-21602 · Unknown · Aakif Kadiwala Tags Cloud Manager
Name of the Vulnerable Software and Affected Versions: Aakif Kadiwala Tags Cloud Manager plugin versions 1.0.0 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...
WordPress plugin Tags Cloud Manager 跨站脚本漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Tags Cloud Manager, which is caused by improper validation of user-supplied...
CVE-2023-0421
The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link...
CVE-2023-0421
The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link...
Cross site scripting
The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link...
CVE-2023-0421
CVE-2023-0421 refers to a reflected XSS in the Cloud Manager WordPress plugin, affecting versions <= 1.0. The issue arises because the query parameter with the value of the field named (in reports) “ricerca” is not sanitized/escaped before being output in an admin panel, which allows an unauth...
CVE-2023-0421 Cloud Manager <= 1.0 - Reflected XSS
The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link...
CVE-2023-0421 Cloud Manager <= 1.0 - Reflected XSS
The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link...