GeoDjango Spatial Field DoS

The vulnerability related to spatial field and component search in GeoDjango, a software platform for Django web applications, involves uncontrolled recursion. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

PT-2024-28880 · Martin Kucej · I-Librarian

Name of the Vulnerable Software and Affected Versions: Martin Kucej i-librarian versions 5.11.0 and before Description: The issue allows a local attacker to execute arbitrary code via the search function in the import component. This is a Cross Site Scripting vulnerability. Recommendations: For...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...