CVE-2022-29602

The gridelements aka Grid Elements extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10.2.0 extension for TYPO3 allows XSS...

CVE-2022-29602

The gridelements aka Grid Elements extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10.2.0 extension for TYPO3 allows XSS...

CVE-2022-29602

Summary: CVE-2022-29602 concerns the TYPO3 Grid Elements (gridelements) extension. Multiple connected sources confirm a stored/reflected XSS vulnerability affecting Grid Elements versions 7.6.1; 8.x up to 8.7.0; 9.x up to 9.7.0; and 10.x up to 10.2.0, caused by insufficiently cleansed user-suppli...

Siemens EN100 Ethernet Module

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: EN100 Ethernet Module Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer. 2. RISK EVALUATION Successful exploitation of this vulnerability could...

WordPress Image Gallery-Grid Gallery plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Image Gallery-Grid Gallery plugin 1.1.1 and earlier versions have a cross-site scripting...

Ltd. Gold Grid Security Trusted Operation and Maintenance Management System has a logic flaw vulnerability

Golden Grid Security Trusted Operation and Maintenance Management System provides a professional "human-machine" interactive operation and maintenance platform and professional "human-machine" delivery solutions. Ltd. Jin Grid Security Trusted Operation and Maintenance Management System has a log...

WordPress plugin Image Gallery - Grid Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Image Gallery-Grid Gallery plugin 1.1.1 and earlier versions have a cross-site scripting...

WordPress Post Grid,Slider

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Post Grid,Slider...

Webkul krayin crm 跨站脚本漏洞

Webkul krayin crm is a free and open source CRM solution for small and medium sized businesses from Webkul India. A cross-site scripting vulnerability exists in Webkul krayin crm versions prior to 1.2.2, which stems from an XSS vulnerability in datagrid...

MAL-2022-2991 Malicious code in fe-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b8452b6601a0290b2602c159aa5fbf2eccc43690b1527ab86dab56c6a6ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b8452b6601a0290b2602c159aa5fbf2eccc43690b1527ab86dab56c6a6ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @harrysforge/grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f24bf93db656f39f416cbf6cc0fd20097c380469659c0245a5263c925c0ec8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-315 Malicious code in @harrysforge/grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f24bf93db656f39f416cbf6cc0fd20097c380469659c0245a5263c925c0ec8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1266

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-1266: Improper Neutralization of Input During Web Page Generation

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress plugin Post Grid, Slider & Carousel Ultimate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Post Grid,Slider...

Selenium Grid Cross-Site Request Forgery (CVE-2022-28108)

A cross-site request forgery vulnerability exists in Selenium Grid. Successful exploitation of this vulnerability could result in code execution on the affected system...

CVE-2022-30469

In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman&section=get&page=grid leads to SQL injection...

CVE-2022-30469

In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman&section=get&page=grid leads to SQL injection...

PT-2022-20134

Name of the Vulnerable Software and Affected Versions Afian Filerun version 20220202 Description The issue is related to a lack of sanitization of the POST parameter metadata in the /module=fileman&section=get&page=grid endpoint, which leads to SQL injection. Recommendations For Afian Filerun...