Lucene search
+L

56 matches found

CNNVD
CNNVD
added 2026/04/28 12:00 a.m.17 views

Code-Projects Coaching Management System 跨站脚本漏洞

The Code-Projects Coaching Management System is an open-source coaching management system developed by Code-Projects. Version 1.0 of the Code-Projects Coaching Management System contains a cross-site scripting vulnerability. This vulnerability stems from the Complaint Parameter in the Complaint...

5.1CVSS5.7AI score0.00232EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/28 12:00 a.m.17 views

PT-2026-35654

Name of the Vulnerable Software and Affected Versions code-projects Coaching Management System version 1.0 Description An issue exists in the Complaint Form Page within the file '/cims/modules/student/complaint.php'. Remote attackers can initiate cross-site scripting XSS—a technique where malicio...

5.1CVSS5.7AI score0.00232EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2026/04/28 12:00 a.m.20 views

Code-Projects Coaching Management System 注入漏洞

The Code-Projects Coaching Management System is an open-source coaching management system developed by Code-Projects. Version 1.0 of the Code-Projects Coaching Management System has a SQL injection vulnerability. This vulnerability stems from the complaintreply parameter in the...

6.5CVSS6.7AI score0.00233EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.12 views

CVE-2025-69409

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes PJ | Life & Business Coaching pj allows PHP Local File Inclusion.This issue affects PJ | Life & Business Coaching: from n/a through = 3.0.0...

8.1CVSS5.5AI score0.00512EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.17 views

CVE-2025-69409

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes PJ | Life & Business Coaching pj allows PHP Local File Inclusion.This issue affects PJ | Life & Business Coaching: from n/a through = 3.0.0...

8.1CVSS0.00512EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.37 views

CVE-2025-69409 WordPress PJ | Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes PJ | Life & Business Coaching pj allows PHP Local File Inclusion.This issue affects PJ | Life & Business Coaching: from n/a through = 3.0.0...

8.1CVSS0.00512EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.8 views

CVE-2025-69409 WordPress PJ | Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes PJ | Life & Business Coaching pj allows PHP Local File Inclusion.This issue affects PJ | Life & Business Coaching: from n/a through = 3.0.0...

5.5AI score0.00512EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/20 3:46 p.m.6 views

CVE-2025-69409

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes PJ | Life & Business Coaching pj allows PHP Local File Inclusion.This issue affects PJ | Life & Business Coaching: from n/a through = 3.0.0...

5.5AI score0.00512EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/20 3:46 p.m.26 views

CVE-2025-69409

CVE-2025-69409 is a Local File Inclusion vulnerability in the WordPress theme “PJ | Life & Business Coaching” up to version 3.0.0, caused by improper control of filenames in PHP include/require statements. The issue allows local file inclusion and is described with a High risk (CVSS 3.1: AV:N/AC:...

8.1CVSS5.6AI score0.00512EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/20 12:00 a.m.21 views

WordPress plugin PJ | Life & Business Coaching 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

8.1CVSS5.8AI score0.00512EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.21 views

PT-2026-21190

Name of the Vulnerable Software and Affected Versions PJ | Life & Business Coaching versions prior to 3.0.1 Description A flaw exists in PJ | Life & Business Coaching related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows...

5.5AI score0.00512EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/02/11 11:28 a.m.14 views

WordPress PJ | Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme PJ | Life & Business Coaching versions = 3.0.0...

8.1CVSS5.4AI score0.00512EPSS
SaveExploits0Affected Software1
Akamai Blog
Akamai Blog
added 2025/03/25 3:00 p.m.20 views

Akamai Wins Best Sales Leadership Development Program from Brandon Hall

Learn how Akamai's award-winning sales leadership development program transforms sales managers into impactful coaches, driving growth and performance...

7.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/21 8:36 a.m.11 views

CVE-2024-13663

The Coaching Staffs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mstw-cs-table' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS7.4AI score0.00323EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/19 8:15 a.m.7 views

CVE-2024-13663

The Coaching Staffs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mstw-cs-table' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00323EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/19 7:32 a.m.5 views

CVE-2024-13663 Coaching Staffs <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Coaching Staffs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mstw-cs-table' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS7.4AI score0.00323EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/19 12:00 a.m.11 views

WordPress plugin Coaching Staffs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8.2AI score0.00323EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/02/18 11:17 p.m.8 views

WordPress Coaching Staffs plugin <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Coaching Staffs versions = 1.4...

6.4CVSS5.7AI score0.00323EPSS
SaveExploits0References1Affected Software1
Rapid7 Blog
Rapid7 Blog
added 2025/01/30 2:00 p.m.6 views

Paying It Forward: Giving and Receiving Mentorship in Tech

I’ve never actually seen the 2000 romantic drama Pay It Forward , but the movie’s core idea has stayed with me since I first heard of it: The best way to repay a favor or good deed is to do one for someone else. You ‘pay it forward,’ and ask that person to do likewise, creating an expanding web o...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/11/08 9:39 a.m.22 views

Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective

Let's face it—traditional security training can feel as thrilling as reading the fine print on a software update. It's routine, predictable, and, let's be honest, often forgotten the moment it's over. Now, imagine cybersecurity training that's as unforgettable as your favorite show. Remember how...

6.9AI score
SaveExploits0
Rows per page
Query Builder