139 matches found
CVE-2022-26847
SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...
CVE-2022-26847
SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...
SPIP 信息泄露漏洞
SPIP is a Web-based content distribution system used primarily for online collaboration. A security vulnerability exists in SPIP, which stems from a web-based system or product that does not properly restrict access to resources from unauthorized roles. An unauthenticated attacker could use this...
WordPress Multicollab – Google Doc-Style Editorial Commenting for WordPress plugin <= 2.0.3 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Multicollab – Google Doc-Style Editorial Commenting for WordPress plugin versions = 2.0.3. Solution Update the WordPress Multicollab – Google Doc-Style Editorial Commenting plugin to the latest available version at least 2.0.4...
WordPress Content Scheduler: Editorial Calendar and Notes plugin < 1.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Content Scheduler: Editorial Calendar and Notes plugin versions 1.2.0. Solution Update the WordPress Content Scheduler: Editorial Calendar and Notes plugin to the latest available version at least 1.2....
PublishPress Editorial Calendar < 3.5.1 - Reflected Cross-Site Scripting
The plugin does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues PoC https://example.com/wp-admin/admin.php?page=pp-content-overview="="...
PublishPress Editorial Calendar < 3.5.1 - Reflected Cross-Site Scripting
The plugin does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues https://example.com/wp-admin/admin.php?page=pp-content-overview&orderby="alert/XSS-orderby/&order="alert/XSS-order/...
editorialfundamentos.es Cross Site Scripting vulnerability OBB-1264386
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL Injection Vulnerability in Sancai Journal Acquisition System (CNVD-2020-38472)
Sancai Journal Acquisition and Editing System is a networked office platform. SQL injection vulnerability exists in Sancai Journal Editorial System. An attacker can exploit the vulnerability to obtain sensitive information from the database...
editorialcartoonists.com XSS vulnerability
Open Bug Bounty ID: OBB-707223 Description| Value ---|--- Affected Website:| editorialcartoonists.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...
academiaeditorial.com XSS vulnerability
Open Bug Bounty ID: OBB-662099 Description| Value ---|--- Affected Website:| academiaeditorial.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Mitre Tackles Its Critics: Set To Revamp CVE Vulnerability Reporting
Mitre Corporation will introduce a new pilot program for classifying Common Vulnerabilities and Exposures CVE in the coming weeks. The move is in response to a backlash in the security community where some critics contend Mitre is failing to keep pace with a massive influx in the number of report...
icariaeditorial.com XSS vulnerability
Vulnerable URL: http://www.icariaeditorial.com/contenido/busquedaavanzada.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1826964 Google Pagerank| 5 VIP website status:| No Chec...
WordPress Editorial Calendar Plugin <= 2.6 - Cross Site Scripting
This plugin is prone to a post title XSS vulnerability. Solution Upgrade the plugin...
WordPress Editorial Calendar Plugin <= 2.6 - Bypass
This plugin is prone to a permission verification arbitrary calendar post deletion vulnerability. Solution Update the plugin...
WordPress Editorial Calendar Plugin <= 2.6 - Cross Site Scripting
This plugin is prone to a post title XSS vulnerability. Solution Upgrade the plugin...
WordPress Editorial Calendar Plugin <= 2.6 - SQL Injection
This plugin is prone to a post query multiple filter SQL injection vulnerability. Solution Upgrade the plugin...
WordPress Editorial Calendar Plugin <= 2.6 - Bypass
This plugin is prone to a permission verification arbitrary calendar post deletion vulnerability. Solution Update the plugin...