CVE-2025-53293

Missing Authorization vulnerability in Morten Dalgaard Johansen Dashboard Widget Sidebar dashboard-widget-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Widget Sidebar: from n/a through = 1.2.3...

CVE-2025-53293 WordPress Dashboard Widget Sidebar plugin <= 1.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Morten Dalgaard Johansen Dashboard Widget Sidebar dashboard-widget-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Widget Sidebar: from n/a through = 1.2.3...

CVE-2025-53293 WordPress Dashboard Widget Sidebar plugin <= 1.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Morten Dalgaard Johansen Dashboard Widget Sidebar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Dashboard Widget Sidebar: from n/a through 1.2.3...

PT-2025-25310

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can inject malicious JavaScript code into the Transform Function which will...

CVE-2019-14297

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx...

CVE-2024-56024

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget create-custom-dashboard-widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through = 1.0.0...

CVE-2024-56024

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget create-custom-dashboard-widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through = 1.0.0...

CVE-2024-56024

CVE-2024-56024 affects the DuoGeek Custom Dashboard Widget (WordPress plugin) with Reflected XSS due to improper input neutralization during page generation, impacting versions up to 1.0.0. CVSS v3.1 base score: 7.1 (HIGH). The provided documents do not specify a patch or fixed version.

CVE-2024-56024 WordPress Custom Dashboard Widget plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through 1.0.0...

CVE-2024-56024 WordPress Custom Dashboard Widget plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget create-custom-dashboard-widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through = 1.0.0...

WordPress plugin Custom Dashboard Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress Custom Dashboard Widget plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Custom Dashboard Widget versions = 1.0.0...

CVE-2024-51860

CVE-2024-51860 is a stored cross-site scripting (XSS) vulnerability in the DuoGeek Custom Dashboard Widget for WordPress. The issue arises from improper neutralization of input during web page generation, allowing stored malicious input to be reflected in the widget’s output. Affected: Custom Das...

WordPress plugin Custom Dashboard Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress Custom Dashboard Widget plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Custom Dashboard Widget versions = 1.0.0...

WordPress Custom Dashboard Widget Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Custom Dashboard Widget Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51860 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dc49fe065d6e Credits SOPROBRO Required privilege...

Malicious code in auth0-dashboard-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd3d9dcd233e8f88bec84813744dcf3ea68a677d4025fd66d55d2f1190be1b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7094 Malicious code in auth0-dashboard-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd3d9dcd233e8f88bec84813744dcf3ea68a677d4025fd66d55d2f1190be1b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Analytics-dashboard-widget 跨站脚本漏洞

Analytics-dashboard-widget is an analytics dashboard widget from Sterc open source. A cross-site scripting vulnerability exists in Sterc Analytics-dashboard-widget version 1.0.5 and earlier. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Cisco Firepower Management Center XML Entity Expansion (cisco-sa-fmc-xee-DFzARDcs)

The version of Cisco Firepower Management Center FMC installed on the remote host is prior to 6.6.1. It is, therefore, affected by a vulnerability in the dashboard widget that allows an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The...