7132 matches found
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
ELADMIN security vulnerabilities
ELADMIN is a backend management system for elunez individual developers. A security vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from a CSV injection issue in the Exception Log Download module...
PT-2025-4755 · Eladmin · Eladmin
Name of the Vulnerable Software and Affected Versions: eladmin versions =2.7 Description: The issue concerns CSV injection in the exception log download module. This allows for potential data manipulation or extraction. No information is provided about the estimated number of affected devices or...
CVE-2025-22978
The eladmin backend management system (versions
CVE-2025-22978: Improper Neutralization of Special Elements in Output Used by a Downstream Component
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2024-12772
The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability...
CVE-2024-12772
CVE-2024-12772 affects Ninja Tables – Easy Data Table Builder for WordPress. Multiple sources confirm a stored Cross-Site Scripting (XSS) vulnerability in Ninja Tables prior to version 5.0.17, triggered when outputting unsanitized CSV-import data back to the page. Root cause: inputs are not prope...
CVE-2024-12772 Ninja Tables < 5.0.17 - Admin+ Stored XSS
The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability...
CVE-2024-12772 Ninja Tables < 5.0.17 - Admin+ Stored XSS
The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability...
CVE-2024-12772: Improper Neutralization of Input During Web Page Generation
The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability...
PT-2025-1947
Name of the Vulnerable Software and Affected Versions The Ninja Tables WordPress plugin versions prior to 5.0.17 Description The issue arises from the plugin not sanitizing and escaping a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting issue...
CVE-2025-24689: Insertion of Sensitive Information into Externally-Accessible File or Directory
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta allows Retrieve Embedded Sensitive Data.This issue affects Import and export users and customers: from n/a through =...
CVE-2024-13562: Exposure of Sensitive Information to an Unauthorized Actor
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads directory. This makes it possible for unauthenticated attackers to extract sensitive data stored...
CVE-2023-46401
KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...
CVE-2023-46400
KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function...
CVE-2023-46400
KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function...