WordPress插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. The WordPress plugin suffers from a cross-sit...

CVE-2021-42776

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import...

CVE-2021-42776

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import...

CVE-2021-42776

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import...

Design/Logic Flaw

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import...

CVE-2021-42776

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import...

CVE-2021-42776

CVE-2021-42776 affects CloverDX Server before 5.11.2 and CloverDX 5.12.x before 5.12.1, where XML External Entity (XXE) processing is vulnerable during configuration import. Impact per sources is limited to the XXE exposure; CVSS indicates at least a High impact on confidentiality with no integri...

CloverDX 代码问题漏洞

CloverDX is an enterprise data management platform designed to solve demanding real-world data challenges. Design, automate, manipulate and publish data. A security vulnerability exists in CloverDX that stems from allowing the use of XXE during configuration import...

CVE-2021-44077

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration...

PT-2021-6071

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus versions prior to 11306 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 10530 Zoho ManageEngine SupportCenter Plus versions prior to 11014 Description The issue is related to unauthenticated remote...

Cross-site Scripting (XSS)

cacti:sid is vulnerable to cross-site scripting XSS attacks. Template import for the midwinter theme allows remote attackers to trigger XSS...

CVE-2021-24812

The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV...

CVE-2021-24812

The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV...

Cross site scripting

The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV...

CVE-2021-22970

Concrete CMS formerly concrete5 versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable toa. SSRF attacks on the private LAN servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb. SS...

CVE-2021-44036

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

CVE-2021-44036

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

CVE-2021-44036

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

Cross site request forgery (csrf)

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

CVE-2021-44036

CVE-2021-44036 affects Team Password Manager (TeamPasswordManager) before version 10.135.236, with a cross-site request forgery (CSRF) vulnerability during import. The issue is rooted in insufficient request validation across import functionality, enabling an attacker to induce unintended actions...