CVE-2019-18881

WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile...

CVE-2025-12862 projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

EUVD-2019-8569

Malware in sbrugna...

PT-2025-10028

Name of the Vulnerable Software and Affected Versions Homey theme for WordPress versions up to and including 2.4.3 Description The issue allows for authentication bypass due to the verification id value being set to empty and a missing not empty check in the dashboard user profile page. This...

CVE-2019-18881

WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile...

PT-2019-15709

Name of the Vulnerable Software and Affected Versions WSO2 IS as Key Manager version 5.7.0 Description The issue allows unauthenticated reflected XSS in the dashboard user profile. Recommendations For version 5.7.0, update to a newer version that contains a fix for this issue...

CVE-2019-18881: Improper Neutralization of Input During Web Page Generation

WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile...