370 matches found
CVE-2025-14132
The CVE-2025-14132 entry refers to the WordPress plugin Category Dropdown List. It is a Reflected Cross-Site Scripting vulnerability exploitable via the PHP_SELF variable in all versions up to 1.0, due to insufficient input sanitization/output escaping. The Wordfence detail lists an affected prod...
CVE-2025-14132 Category Dropdown List <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
The Category Dropdown List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' variable in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2025-14132 Category Dropdown List <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
The Category Dropdown List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' variable in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
PT-2025-50854
The Category Dropdown List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $ SERVER'PHP SELF' variable in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
WordPress plugin Category Dropdown List 跨站脚本漏洞
...
CVE-2025-67496
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting XSS vulnerability in the /WeGIA/html/geral/configurarsenhas.php endpoint. The application does not sanitize user-controlled data before...
CVE-2025-67496 WeGia is Vulnerable to XSS through id_pessoa Parameter on Password Configuration Page
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting XSS vulnerability in the /WeGIA/html/geral/configurarsenhas.php endpoint. The application does not sanitize user-controlled data before...
CVE-2025-67496
WeGIA CVE-2025-67496 affects version 3.5.4 and earlier; Stored XSS in /WeGIA/html/geral/configurar_senhas.php occurs because user-controlled data (employee names) are retrieved from DB and inserted into HTML elements without proper escaping. This can allow script injection via the employee dropd...
PT-2025-50279
Name of the Vulnerable Software and Affected Versions WeGIA versions 3.5.4 and below Description WeGIA, an open source Web Manager for Institutions, is affected by a Stored Cross-Site Scripting XSS issue. The application fails to sanitize user-controlled data before rendering it within the employ...
Malicious code in wishlist_dropdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96af5d4cffbd1a2bb13ecd403b9acf5e0fe62f6df151c6b511f556c9c0a11c31 The package wishlistdropdown was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198542
Malicious code in wishlistdropdown npm...
MAL-2025-49287 Malicious code in month_year_dropdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d30f8bd0beed9617d4eaeb8717a7dfcbe805a095a59966041e4af31d174f9d2 The package monthyeardropdown was found to contain malicious code...
Malicious code in month_year_dropdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d30f8bd0beed9617d4eaeb8717a7dfcbe805a095a59966041e4af31d174f9d2 The package monthyeardropdown was found to contain malicious code...
EUVD-2025-37277
Malicious code in monthyeardropdown npm...
EUVD-2025-37273
Malicious code in yeardropdown npm...
Jenkins Sidepanel Unauthorized Agent/Queue Exposure
Jenkins versions prior to 2.582 and prior to LTS 2.516.3 are affected by a lack of permission check for the authenticated user profile dropdown menu. A remote and unauthenticated attacker can obtain limited information about the Jenkins configuration agent and builds. No source data...
EUVD-2019-2042
Malware in sbrugna...
EUVD-2013-2643
Malware in sbrugna...