CVE-2025-23730

CVE-2025-23730 refers to a reflected XSS in the FLX Dashboard Groups WordPress plugin. The vulnerability affects FLX Dashboard Groups versions from n/a to 0.0.7. The NVD/RH/ENISA data in the connected documents confirm a Reflected Cross-Site Scripting issue, with a CVSS v3.1 base score of 7.1 (Hi...

CVE-2025-23730 WordPress FLX Dashboard Groups plugin <= 0.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flx0 FLX Dashboard Groups flx-dashboard-groups allows Reflected XSS.This issue affects FLX Dashboard Groups: from n/a through = 0.0.7...

OS Command Injection

Ray is vulnerable to Os command Injection. The vulnerability is due to improper input sanitization in the cpuprofile URL parameter, allowing attackers to execute OS commands remotely on the system running the Ray dashboard without authentication...

PT-2025-5055 · Unknown · Flx Dashboard Groups

Name of the Vulnerable Software and Affected Versions: FLX Dashboard Groups versions 0.0.0 through 0.0.7 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an attacker can inject malicio...

WordPress plugin FLX Dashboard Groups 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Cross-Site Request Forgery (CSRF)

typo3/cms-dashboard is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to improper validation of HTTP methods in state-changing actions and misconfigurations in the backend settings, such as disabled security.backend.enforceReferrer or lax/none BE/cookieSameSite settings,...

Malicious code in sendbird-moderation-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9be644a0fd9fb186a5e62cc024cf4fc725c0f9a3dd25aab1e25cd138dc454297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-135 Malicious code in cumulus-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f1f8e685a786d680773dae17f3fdca813dc627d1a031200036521aef32b1566 The OpenSSF Package Analysis project identified 'cumulus-dashboard' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in cumulus-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f1f8e685a786d680773dae17f3fdca813dc627d1a031200036521aef32b1566 The OpenSSF Package Analysis project identified 'cumulus-dashboard' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Codezips Gym Management System 注入漏洞

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter name in the file /dashboard/admin/editmember.php that can lead to SQL injection...

CVE-2025-23917

Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.8...

CVE-2025-23917

CVE-2025-23917 affects Chamber Dashboard Business Directory (WordPress plugin), with impact described as a Missing Authorization vulnerability in configurations that govern access control. Affected range is listed as Chamber Dashboard Business Directory: from n/a through 3.3.8. The CVSS metric pr...

CVE-2025-23917 WordPress Chamber Dashboard Business Directory Plugin <= 3.3.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.8...

CVE-2025-23917 WordPress Chamber Dashboard Business Directory Plugin <= 3.3.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.8...

WordPress Chamber Dashboard Business Directory Plugin <= 3.3.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata in WordPress Plugin Chamber Dashboard Business Directory versions = 3.3.10...

WordPress WordPress Dashboard Tweeter plugin <= 1.3.2 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin WordPress Dashboard Tweeter versions = 1.3.2...

WordPress FLX Dashboard Groups plugin <= 0.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin FLX Dashboard Groups versions = 0.0.7...

WordPress Kv Compose Email From Dashboard plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Kv Compose Email From Dashboard versions = 1.1...

WordPress Live Dashboard plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Live Dashboard versions = 0.3.3...

CVE-2024-11452

The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'businesscategories' shortcode in all versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...