940 matches found
EUVD-2026-96338
Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields,...
CVE-2026-108114
Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields,...
CVE-2026-108114 Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions
Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields,...
Security Bulletin: Bouncy Castle(bcprov and bcpg) security vulnerability in IBM FileNet Content Manager(FNCM) reported for FileNet Deployment Manager(FDM)
Summary IBM FileNet Content ManagerFNCM 5.7.0-IF6 addresses multiple Bouncy Castle CVEs reported for FileNet Deployment ManagerFDM Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This iss...
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
CVE-2026-39599
The WDS MCP Content Manager WordPress plugin affects versions
EUVD-2026-92953
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
PT-2026-106327
Name of the Vulnerable Software and Affected Versions WDS MCP Content Manager versions prior to 3.10.5 Description A broken access control issue exists for contributors, allowing unauthorized access or actions within the system. Recommendations Update to a version newer than 3.10.4...
CVE-2023-43352-CMSmadesimple-SSTI--Content
CMSmadesimple SSTI v2.2.18 Autor: Sergio Descripción: Una vulnerabilidad de Server Side Template Injection SSTI en CMSmadesimple v.2.2.18 permite a un atacante local utilizar la sintaxis de plantilla nativa para inyectar un payload malicioso en una plantilla, que luego se ejecuta en el servidor...
CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager
CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: Múltiples vulnerabilidades de cross-site scripting XSS en CMSmadesimple v.2.2.18 permiten a un atacante local ejecutar código arbitrario mediante un script manipulado en los datos Page Specific Metadata y Smarty del Menú de...
WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WDS MCP Content Manager versions = 3.10.4...
CVE-2026-97239
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-97239
The WordPress MCP Content Manager Lite plugin (versions
CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
EUVD-2026-89903
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
