19621 matches found
CVE-2025-54117: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting XSS vulnerability in NamelessMC before 2.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the dashboard text editor component. This vulnerability is fixed ...
Linux Distros Unpatched Vulnerability : CVE-2021-39201
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Impact The issue allows an authenticat...
Linux Distros Unpatched Vulnerability : CVE-2019-16781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 5.3.1, authenticated users with lower privileges like contributors can inject JavaScript code in the block editor, which is executed within...
Linux Distros Unpatched Vulnerability : CVE-2021-29450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This...
CVE-2025-52712
Path Traversal: '.../...//' vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Path Traversal.This issue affects Post and Page Builder by BoldGrid: from n/a through = 1.27.8...
CVE-2025-8896: Improper Neutralization of Input During Web Page Generation
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdprcommunicationpreferences' parameter in all versions up to, and including, 3.14.3 due to insufficient input sanitization and...
CVE-2012-10054
Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter,...
CVE-2025-51691
Cross-Site Scripting XSS vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 May 2025 allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before renderin...
The vulnerability of the GIMP graphic editor relates to the execution of operations beyond the buffer boundaries in memory, which allows a malicious actor to cause a service failure.
The vulnerability of the GIMP graphic editor is related to the execution of operations beyond the buffer boundaries in memory when processing TGA format files. Exploiting this vulnerability can allow an attacker to cause a system failure...
Malicious code in elevio-editor (npm)
The package elevio-editor was found to contain malicious code...
Malicious code in markup-web-editor (npm)
The package markup-web-editor was found to contain malicious code...
Malicious code in ory-editor-core-hubside (npm)
The package ory-editor-core-hubside was found to contain malicious code...
Malicious code in ory-editor-renderer-hubside (npm)
The package ory-editor-renderer-hubside was found to contain malicious code...
Malicious code in three-editor-release (npm)
The package three-editor-release was found to contain malicious code...
Malicious code in understory-editor (npm)
The package understory-editor was found to contain malicious code...
Malicious code in webtask-sequence-editor (npm)
The package webtask-sequence-editor was found to contain malicious code...
Malicious code in ymail-editor (npm)
The package ymail-editor was found to contain malicious code...
MAL-2025-28502 Malicious code in ory-editor-core-hubside (npm)
The package ory-editor-core-hubside was found to contain malicious code...
delegate-dom (>=0.0.0, <=0.0.1), dom-delegation-stream (0.0.0) +2 more potentially affected by unknown CVE via matches-dom-selector (0.0.0)
matches-dom-selector NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on matches-dom-selector and may be impacted: - delegate-dom =0.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25996...