PT-2026-24009

Name of the Vulnerable Software and Affected Versions SourceCodester/janobe Resort Reservation System version 1.0 Description A flaw exists that allows unrestricted file uploads. This is due to improper handling of the image argument within the doInsert function located in the...

WordPress NEX-Forms Lite Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . NEX-Forms Lite is one of the user-defined plugin to create forms . A cross-site scripting vulnerability exists in...

PT-2016-3497

Name of the Vulnerable Software and Affected Versions NEX-Forms Lite plugin version 2.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the form fields parameter in a 1 do edit or 2 do insert action to the "/wp-admin/admin-ajax.php" API...