26538 matches found
CVE-2025-64369
The CVE refers to WordPress Plugin Contact Form Email
CVE-2025-64369 WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through = 1.3.58...
CVE-2025-64369 WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through = 1.3.58...
CVE-2025-59491
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
PT-2025-46810
Name of the Vulnerable Software and Affected Versions codepeople Contact Form Email versions through 1.3.58 Description An authorization issue exists in codepeople Contact Form Email, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a versi...
Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2023-27371)
GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHDcreatepostprocessor method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a...
PT-2025-46828
Insecure Direct Object Reference IDOR vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in ‘/ajax/TInnova v2/Formulario...
WordPress plugin Contact Form Email 安全漏洞
WordPress Contact Form Email plugin is a powerful contact form tool that is mainly used to create contact forms and email the submitted data to a specified address, while supporting data storage, report generation and export features. A lack of authorization vulnerability exists in the WordPress...
Updated python-tornado packages fix security vulnerability
Tornado vulnerable to excessive logging caused by malformed multipart form data. CVE-2025-47287...
EUVD-2025-131924
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
CVE-2025-59491
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
CVE-2025-59491
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
PT-2025-47844
Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 routers. The issue is related to the manipulation of the...
PT-2025-46668
Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description A Cross Site Scripting issue exists in CentralSquare Community Development. The issue is present in form fields, potentially allowing for malicious script injection. Recommendation...
CVE-2025-59491
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
CVE-2025-59491
CVE-2025-59491 is a Cross Site Scripting vulnerability affecting CentralSquare Community Development v19.5.7, reported across multiple feeds. Descriptions consistently state XSS via form fields, but the provided documents do not specify the underlying code path, affected modules, or root cause. P...
CentralSquare Community Development 安全漏洞
CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7 that originates from cross-site scripting in form fields...
WordPress Contact Form 7 AWeber Extension plugin unauthorized data modification vulnerability
WordPress Contact Form 7 AWeber Extension plugin is an extension plugin designed for WordPress Contact Form 7 plugin for automatic synchronization of form data to AWeber email marketing platform. The WordPress Contact Form 7 AWeber Extension plugin suffers from an unauthorized data modification...
PT-2025-47842
Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 devices. The issue is due to the manipulation of the...