Lock User Account < 1.0.4- Arbitrary Account Lock/Unlock via CSRF

Description The plugin does not have CSRF check when bulk locking and unlocking accounts, which could allow attackers to make logged in admins lock and unlock arbitrary users via a CSRF attack Make a logged in admin open one of the links below, this will make them lock/unlock the user with ID 5...

CVE-2022-28512: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters...

CVE-2018-18721: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5...

PT-2018-14599

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description A cross-site scripting XSS issue was found in the "admin/link/editlink?id=5" endpoint. This issue allows for potential malicious script injection. Recommendations For YUNUCMS version 1.1.5, update to a newer...