328 matches found
CVE-2023-41687
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Irina Sokolovskaya Goods Catalog plugin = 2.4.1 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Irina Sokolovskaya Goods Catalog plugin = 2.4.1 versions...
CVE-2023-41687 WordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Irina Sokolovskaya Goods Catalog plugin = 2.4.1 versions...
CVE-2023-41687 WordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Irina Sokolovskaya Goods Catalog plugin = 2.4.1 versions...
CVE-2023-41687
CVE-2023-41687: WordPress Goods Catalog plugin (versions
WordPress Plugin Goods Catalog Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2023-32015 · Ecshop · Ecshop
Name of the Vulnerable Software and Affected Versions: ECshop version 4.1.1 Description: A critical issue has been found in an unknown functionality of the file /admin/order.php. The manipulation of the goods id argument leads to SQL injection. This issue can be exploited remotely. Recommendation...
ECShop SQL Injection Vulnerability
ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall , source code free download experience , suitable for enterprise development and build mall. ECShop 4.1.1 version of the existence of SQL injection vulnerability ...
PT-2023-28047 · Unknown · Irina Sokolovskaya Goods Catalog
Name of the Vulnerable Software and Affected Versions: Irina Sokolovskaya Goods Catalog plugin versions = 2.4.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects versions of the Irina Sokolovskaya Goods Catalog plugin where authentication as a...
WordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)
Software Goods Catalog Type Plugin Vulnerable versions = 2.4.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41687 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f4c4ed84d022 Credits Abdi Pranata Required...
django-sspanel Command Injection Vulnerability
django-sspanel is a new shadowsocks web panel developed with diango by Ehco Personal Developers. A security vulnerability exists in django-sspanel version v2022.2.2, which stems from a Remote Command Execution RCE vulnerability in the GoodsCreateView.post method of sspanel/adminview.py...
EasyAdmin8 代码问题漏洞
EasyAdmin8 is a server administration suite for Blumlaut individual developers. A code issue vulnerability exists in EasyAdmin8 version 2.0.2.2, which stems from the fact that the file /admin/index/index.html/admin/mall.goods/index.html causes unrestricted uploads...
PT-2023-26244 · Unknown · Easyadmin8
Name of the Vulnerable Software and Affected Versions: EasyAdmin8 version 2.0.2.2 Description: A vulnerability has been found in the File Upload Module of EasyAdmin8, affecting an unknown function of the file /admin/index/index.html/admin/mall.goods/index.html. This issue leads to unrestricted...
WordPress WooCommerce Checkout For Digital Goods Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)
Software WooCommerce Checkout For Digital Goods Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a6999287f2ca Credits Rafie...
shiziyu SQL注入漏洞
shiziyu Lionfish CMS is a community group-buying website by Lionfish CMS shiziyu. shiziyu CMS has a SQL injection vulnerability that originates from a security issue in the function goodsdetail in the file ApiController.class.php, which leads to sql injection via the parameter goodsid...
Sharing Netflix, Disney+, other passwords is illegal, according to new guidance
The Intellectual Property Office IPO, the UK government body overseeing intellectual property rights in the UK, has quietly released new guidance on piracy and online counterfeit goods. This campaign is a joint effort between IPO and Meta, Facebooks parent company. The general issue on piracy is...
YouTube transparency report shows battle against misinformation
Statistics for YouTube community guidelines enforcement are now available for the period April to June 2022, via Googles Transparency Report. YouTube channels are terminated if they accrue three community guideline strikes in 90 days, have a case of severe abuse predatory behaviour, for example, ...
Newbee-mall code issue vulnerability
newbee-mall is an e-commerce system. newbee-mall v1.0.0 has a security vulnerability that can be exploited by attackers to upload arbitrary files via the upload function of /admin/goods/edit...
CVE-2022-27476
A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...