CVE-2024-8583

A vulnerability was found in SourceCodester Online Bank Management System and Online Bank Management System - 1.0. It has been classified as problematic. This affects an unknown part of the file /mfeedback.php of the component Feedback Handler. The manipulation leads to cross site scripting. It i...

CVE-2024-8583 SourceCodester Online Bank Management System Feedback mfeedback.php cross site scripting

A vulnerability was found in SourceCodester Online Bank Management System and Online Bank Management System - 1.0. It has been classified as problematic. This affects an unknown part of the file /mfeedback.php of the component Feedback Handler. The manipulation leads to cross site scripting. It i...

CVE-2024-8583: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Bank Management System and Online Bank Management System - 1.0. It has been classified as problematic. This affects an unknown part of the file /mfeedback.php of the component Feedback Handler. The manipulation leads to cross site scripting. It i...

PT-2024-39119 · Sourcecodester · Sourcecodester Online Dj Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Bank Management System version 1.0 Description: A vulnerability was found in the component Feedback Handler, affecting an unknown part of the file /mfeedback.php. The manipulation leads to cross-site scripting. It is...

CVE-2024-7134: Improper Neutralization of Input During Web Page Generation

The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘formdata’ parameter in all versions up to, and including, 3.3.78 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2024-8612 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to a CSRF vulnerability in the bulk message sending feature of Moodle's Feedback module's non-respondents report. This vulnerability is caused by an incorrect CSRF token...

PT-2024-30582

Name of the Vulnerable Software and Affected Versions Feedback affected versions not specified Description A flaw was found in Feedback where bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report...

CVE-2024-40478

A Stored Cross Site Scripting XSS vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields...

CVE-2024-7621: Missing Authorization

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the processwpfeedbackmiscoptions function in all versions up to, and including, 4.0.2. This makes it possible for...

PT-2024-28865 · Unknown · Kashipara Online Exam System

Name of the Vulnerable Software and Affected Versions: Kashipara Online Exam System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/admin/afeedback.php" endpoint, allowing remote attackers to execute arbitrary code via the rname and email parameter fields. This...

MAL-2024-7951 Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Code Injection in Get-Simple Getsimple_Cms

CVE-2022-41544 Exploit Script This repository contains a scri...

Malicious code in feedback-html2canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59673c0fc4701541ff9cf2002ba260a6cb6429a2b8ed7bd4398362bab5b421b1 The OpenSSF Package Analysis project identified 'feedback-html2canvas' @ 10.20.1 npm as malicious. It is considered malicious because: - The...

CVE-2024-5902

The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name parameter in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it...

CVE-2024-5902

The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name parameter in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it...

CVE-2024-5902 UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter

The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name parameter in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it...

WordPress UserFeedback Lite plugin <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via Name Parameter vulnerability discovered by zer0gh0st in WordPress Plugin User Feedback versions = 1.0.15...

PT-2024-37236 · WordPress · User Feedback – Create Interactive Feedback Form

Name of the Vulnerable Software and Affected Versions: User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress versions up to, and including, 1.0.15 Description: The issue arises from insufficient input sanitization and output escaping, allowing...

WordPress plugin User Feedback security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress...