CVE-2024-44060 WordPress filmix theme <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jennifer Hall Filmix allows Reflected XSS.This issue affects Filmix: from n/a through 1.1...

CVE-2024-44060

CVE-2024-44060 is a WordPress Filmix vulnerability: a Reflected XSS in the Filmix theme (Jennifer Hall) affecting versions n/a–1.1. The linked sources describe the issue and CVSS details (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N; base score 6.1). Exploitation would involve user interaction and network...

seoulcitizenshall.kr Cross Site Scripting vulnerability OBB-3952564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hindleyhallgolfclub.co.uk Cross Site Scripting vulnerability OBB-3886430

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-2535

A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotel...

CVE-2024-2535 MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php cross site scripting

A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotel...

CVE-2024-2535

MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 is affected by a Cross-Site Scripting vulnerability in the /admin/users.php script, triggered by a manipulated id parameter. The issue is a reflected XSS affecting unknown code paths, with remote exploitation possible and public disclosu...

CVE-2024-2535 MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php cross site scripting

A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotel...

CVE-2024-2534

A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file /admin/users.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. T...

CVE-2024-2534

CVE-2024-2534 affects MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. The vulnerability is an SQL injection in the file /admin/users.php, triggered by manipulating the parameter user_id. It is exploitable remotely, and the exploit has been disclosed publicly. Multiple connected sourc...

CVE-2024-2534 MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php sql injection

A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file /admin/users.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. T...

CVE-2024-2533

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to cross site scripting. The...

CVE-2024-2533

CVE-2024-2533 affects MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. The issue is a cross-site scripting (XSS) vulnerability in the file /admin/update-users.php caused by unsafely handling the id parameter. Remote exploitation is possible and the exploit has been disclosed publicly....

CVE-2024-2533 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php cross site scripting

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to cross site scripting. The...

CVE-2024-2533 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php cross site scripting

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to cross site scripting. The...

CVE-2024-2531

A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2024-2531

A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2024-2532 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php sql injection

A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-2531

The CVE-2024-2531 entry describes a critical vulnerability in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0, specifically in the file /admin/update-rooms.php. The issue is an unrestricted file upload vulnerability in an unknown function, allowing remote exploitation. Public disclosu...

CVE-2024-2531 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php unrestricted upload

A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...