Lucene search
+L

2 matches found

EUVD
EUVD
•added 2026/09/23 6:37 p.m.•21 views

EUVD-2026-85550

Joomla Extension - joomshaper.com - Broken Access Control ACL Bypass in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 - The allowEdit method in ApiController.php hardcoded return true;, bypassing Joomla component-level and asset-level ACL permission checks. Any authenticated...

8.6CVSS5.9AI score0.00313EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/09/13 12:00 a.m.•5 views

PT-2021-16079

Name of the Vulnerable Software and Affected Versions Software License Manager versions prior to 4.4.8 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the edit record parameter is not properly sanitized or escaped before being outputted back in the...

6.1CVSS0.00726EPSS
SaveExploits1References3
Rows per page
Query Builder