2 matches found
PT-2024-16699 · WordPress · Fileorganizer
Name of the Vulnerable Software and Affected Versions: FileOrganizer – Manage WordPress and Website Files plugin for WordPress versions up to, and including, 1.1.4 Description: The issue allows authenticated attackers with Administrator-level access and above to include and execute arbitrary file...
7.2CVSS8AI score0.00854EPSS
SaveExploits0References12
CVE-2007-0651: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...
4.3CVSS5.9AI score0.03101EPSS
SaveExploits0References1
20