51552 matches found
CVE-2025-23989 WordPress Internal Link Builder plugin <= 1.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Alessandro Piconi Internal Link Builder internal-link-builder allows Cross Site Request Forgery.This issue affects Internal Link Builder: from n/a through = 1.0...
CVE-2025-23976
CVE-2025-23976 : A CSRF to Stored XSS vulnerability exists in the WordPress plugin “Issuu Panel” (versions up to and including 2.1.1). Public sources (NVD/Red Hat) describe a CSRF flaw that enables stored XSS, affecting Issuu Panel releases
CVE-2025-23977 WordPress Post Carousel Slider plugin <= 2.0.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Bhaskar Dhote Post Carousel Slider post-carousel-slider allows Stored XSS.This issue affects Post Carousel Slider: from n/a through = 2.0.1...
CVE-2025-23977
CVE-2025-23977 is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin “Post Carousel Slider” up to version 2.0.1. Connected sources (Red Hat, CIRCL, CVE listings, Patchstack, and vendor reports) corroborate that the issue is a Cross-Site Request Forgery that enables stored XSS in th...
Fedora 40 : lemonldap-ng (2025-07901b1995)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-07901b1995 advisory. - SecurityCVE-2024-52948 CSRF on 2FA registration - Security Open redirect vulnerability in logout Tenable has extracted the preceding description block...
Fedora 41 : lemonldap-ng (2025-3aa9a75a72)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3aa9a75a72 advisory. - SecurityCVE-2024-52948 CSRF on 2FA registration - Security Open redirect vulnerability in logout Tenable has extracted the preceding description block...
PT-2025-5246 · Brainvireinfo · Brainvireinfo Dynamic Url Seo
Name of the Vulnerable Software and Affected Versions: Brainvireinfo Dynamic URL SEO versions 1.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended...
Fedora: Security Advisory (FEDORA-2025-07901b1995)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-24504
An improper input validation the CSRF filter results in unsanitized user input written to the application logs...
CVE-2025-24504
An improper input validation the CSRF filter results in unsanitized user input written to the application logs...
CVE-2025-24504
CVE-2025-24504 affects Broadcom Symantec Privileged Access Management . The root cause is an improper input validation in the CSRF filter , resulting in unsanitized user input being written to application logs . The provided documents do not specify exploitation details or a remediation/fix versi...
CVE-2025-24504
An improper input validation the CSRF filter results in unsanitized user input written to the application logs...
WordPress CP Contact Form with PayPal plugin <= 1.3.52 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Krzysztof Zając in WordPress Plugin CP Contact Form with Paypal versions = 1.3.52...
CVE-2024-12709
The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2024-12709
CVE-2024-12709 concerns the WordPress plugin Bulk Me Now! (versions ≤ 2.0). The issue is a lack of CSRF protections in certain paths, enabling attackers to trigger actions as logged-in users via CSRF. Several connected sources corroborate CSRF-related risk and, in Patch Stack, describe a CSRF-cau...
CVE-2024-12709 Bulk Me Now <= 2.0 - Message Deletion via CSRF
The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
PT-2025-1932 · WordPress · Bulk Me Now!
Name of the Vulnerable Software and Affected Versions: Bulk Me Now! WordPress plugin versions 2.0 and earlier Description: The issue is related to the lack of CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks. Recommendations...
MySchool 1.0 SQL Injection / Code Injection / XSS / CSRF Vulnerabilities
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title MySchool System - Multiple Vulnerabilities .:. Google Dorks .:. inurl:web/teacherapp .:. Date:Jan 20, 2025 .:. Exploit Author: bRpsd .:. Contact: cyatlive.no .:. Vendor - https://myschool-system.com/ .:. Vendor...
GitLab 10.6 < 16.9.7 / 16.10 < 16.10.5 / 16.11 < 16.11.2 (CVE-2024-1211)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Gitlab reports: ReDoS in branch search when using wildcards ReDoS in markdown render pipeline Redos on Discord integrations Redos on Google Chat Integration Denial of Service Attack via Pin Menu DoS b...