Welcart e-Commerce < 2.8.22 - Editor+ SQL Injection

Description The plugin does not properly sanitize and escape a parameter before using it in an SQL statement, leading to an SQL injection exploitable by users with a role as low as an editor...

The vulnerability of the makeDetailContent method in the software tool for creating/distributing content in LG Simple Editor allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the makeDetailContent method in the LG Simple Editor’s content creation/distribution software lies in improper restrictions on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the U3D File Parser component in the PDF-XChange PDF document viewing and editing software allows a hacker to execute arbitrary code.

The vulnerability of the U3D File Parser component in the PDF-XChange PDF viewing and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Welcart e-Commerce < 2.8.22 - Editor+ Arbitrary File Upload

Description The plugin does not prevent users with editor or higher privileges from uploading an arbitrary file to an unauthorized directory...

Quill Cross-Site Scripting Vulnerability

Quill is a Quill open source application. Provides application editor functionality. A cross-site scripting vulnerability exists in Quill quill-mention versions prior to 4.0.0, which stems from improper input cleanup and is susceptible to cross-site scripting XSS attacks...

The vulnerability of the Editor Annotation component of the PDF-XChange PDF document viewing and editing software allows a perpetrator to execute arbitrary code.

The vulnerability of the Editor Annotation component in the PDF-XChange PDF document viewing and editing software relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Foxit PDF Editor < 11.2.7 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 11.2.7. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF...

CVE-2023-43610

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor without setting authority or higher privilege to perform unintended database operations...

CVE-2023-43263

A Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component...

CVE-2023-43263

A Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component...

Cross site scripting

A Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component...

CVE-2023-28790 WordPress Simple Staff List Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Brett Shumaker Simple Staff List plugin = 2.2.3 versions...

CVE-2023-28790 WordPress Simple Staff List Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Brett Shumaker Simple Staff List plugin = 2.2.3 versions...

Simple Staff List < 2.2.4 - Editor+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the editor role and above to perform Stored Cross-Site Scripting attacks...

Froala Editor Cross-Site Scripting Vulnerability

Froala Editor is a powerful JavaScript rich text editor for individual developers. A cross-site scripting vulnerability exists in Froala Editor version v.4.1.1 that could allow an attacker to execute arbitrary code via the Markdown component...

Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor

Summary IBM Business Automation Workflow Configuration Editor is vulnerable to multiple attacks. Vulnerability Details CVEID:CVE-2023-32005 DESCRIPTION: Node.js could allow a remote attacker to obtain sensitive information, caused by the failure to restrict file stats through the fs.statfs API in...

CVE-2023-43263

A Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component...

PT-2023-5610 · Froala · Froala Editor

Name of the Vulnerable Software and Affected Versions: Froala Editor version 4.1.1 Description: A Cross-site scripting XSS issue exists due to insufficient protection of the web page structure. This allows a remote attacker to execute arbitrary code via the Markdown component of the Froala Editor...

CVE-2023-43263

CVE-2023-43263 concerns Froala Editor v4.1.1 with a Cross-site Scripting (XSS) issue via the Markdown component. The vulnerability allows an attacker to cause arbitrary code execution through the Markdown feature, as described in multiple sources (NVD, Red Hat, OSV, and related advisories). Mitig...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after its release, due to incorrect validation of input data during the processing of Doc object...