PT-2025-52536

Name of the Vulnerable Software and Affected Versions File Uploader for WooCommerce versions up to and including 1.0.3 Description The File Uploader for WooCommerce plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation within the callback function...

PT-2024-26361

Name of the Vulnerable Software and Affected Versions OMERO.web versions prior to 5.26.0 Description The issue is related to the lack of escaping or validation of the callback parameter in OMERO.web endpoints with JSONP enabled. This affects various endpoints, including /webclient/imgData/...