CVE-2025-24677 WordPress Post/Page Copying Tool to Export and Import post/page for Cross site Migration Plugin <= 2.0.3 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in WPSpins Post/Page Copying Tool allows Remote Code Inclusion. This issue affects Post/Page Copying Tool: from n/a through 2.0.3...

CVE-2025-24677

CVE-2025-24677 concerns WPSpins Post/Page Copying Tool (WordPress plugin). Connected sources confirm an Improper Control of Generation of Code leading to Remote Code Execution (RCE) for Post/Page Copying Tool versions 0 through 2.0.3. Attack requires authenticated/Contributor+ context (per CVSS d...

WordPress plugin Post/Page Copying Tool 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

PT-2025-5497 · WordPress · Wpspins Post/Page Copying Tool

Name of the Vulnerable Software and Affected Versions: WPSpins Post/Page Copying Tool versions 0 through 2.0.3 Description: The issue is related to improper control of code generation, allowing remote code inclusion due to a code injection flaw. This enables remote code inclusion, posing a...

zx 代码注入漏洞

zx is a Google open source tool for writing scripts. A code injection vulnerability exists in zx version 8.3.1, which stems from the presence of an environment variable injection vulnerability that can lead to command execution or abnormal behavior...

Zenvia 代码注入漏洞

Zenvia is a complete customer service software from Zenvia, Inc. A code injection vulnerability exists in Zenvia versions 25.01.22 and earlier, which stems from the parameter subject of the component New Ticket Handler that results in cross-site scripting...

Zenvia 代码注入漏洞

Zenvia is a complete customer service software from Zenvia, Inc. A code injection vulnerability exists in Zenvia version 25.01.22 and prior versions, which stems from an incorrect manipulation of the parameter username that can lead to cross-site scripting attacks...

Code-Projects Job Recruitment 代码注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. A code injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from a cross-site scripting attack due to manipulation of the parameter businessstreamname...

WordPress plugin The AI Infographic Maker 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code injection vulnerabilit...

EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞

EasyVirt DC Scope and EasyVirt CO2 Scope are both products of the French company EasyVirt.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution for IT services, virtual machines and servers in...

WordPress plugin The WooCommerce Product Table Lite 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in the WordPress...

CVE-2025-0747

A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message that will be executed when a user opens the chat...

WordPress plugin The Contact Form & SMTP Plugin for WordPress by PirateForms 代码注入漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin The Contact Form & SMTP Plugin fo...

WordPress plugin Borderless 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

MySchool 1.0 SQL Injection / Code Injection / XSS / CSRF

MySchool version 1.0 suffers from remote SQL injection, php code injection, cross site request forgery, and cross site scripting vulnerabilities. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title MySchool System - Multiple Vulnerabilities .:. Google Dorks .:...

MySchool 1.0 SQL Injection / Code Injection / XSS / CSRF Vulnerabilities

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title MySchool System - Multiple Vulnerabilities .:. Google Dorks .:. inurl:web/teacherapp .:. Date:Jan 20, 2025 .:. Exploit Author: bRpsd .:. Contact: cyatlive.no .:. Vendor - https://myschool-system.com/ .:. Vendor...

Maybecms 代码注入漏洞

Maybecms is a web application in the Upgradeextension open source. A code injection vulnerability exists in Maybecms version 1.2, which stems from the parameter datainfocontent in the file /mb/admin/index.php?u=article-edit can lead to cross-site scripting...

Cianet ONU GW24AC 代码注入漏洞

The Cianet ONU GW24AC is a network device from Cianet. A code injection vulnerability exists in the Cianet ONU GW24AC version 20250127 and prior versions, which stems from the fact that incorrect operation of the parameter browserLang can lead to cross-site scripting attacks...

EmbedAI 跨站脚本漏洞

EmbedAI is a platform from EmbedAI that enables users to use their data to create AI chatbots powered by ChatGPT. EmbedAI suffers from a cross-site scripting vulnerability. An attacker exploiting this vulnerability could inject malicious JavaScript code into messages...

CVE-2024-10001

A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers to inject malicious code into the query selector via the identity property in the message handling function. This enabled the exfiltration of sensitive data by manipulating the DOM, including...