WordPress WPBakery Page Builder Cross-Site Scripting Vulnerability

WordPress WPBakery Page Builder is a visual page builder plugin for the WordPress platform that enables complex layout design through a drag-and-drop interface to create responsive web pages without writing code. WordPress WPBakery Page Builder suffers from a cross-site scripting vulnerability th...

WordPress esri-map-view cross-site scripting vulnerability

WordPress esri-map-view is used to embed Esri/ArcGIS maps or scenes in websites. The plugin realizes map display through short code, supports selecting base map, setting initial view angle, adding custom layers, pop-up information window and other functions, and can embed preconfigured web maps o...

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and others are products of Siemens, a German company. siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers. siemens SIMATIC PCS neo is a distributed control system. siemens SIMATIC STEP 7 is a PLC program simulation...

WordPress Flex Guten Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Flex Guten, which stems from insufficient input cleanup and escaping, and can be exploited by an attacke...

D-Link DIR-615H1 Command Injection Vulnerability

The D-Link DIR-615H1 is a wireless router from China's AUO D-Link. The D-Link DIR-615H1 suffers from a command injection vulnerability, which stems from insufficient cleanup of the toolsvct.htm endpoint input, that can be exploited by an attacker to cause remote code execution...

Sourceforge WANem 安全漏洞

Sourceforge WANem is an open source network testing tool from Sourceforge. A security vulnerability exists in Sourceforge WANem v2.3, which stems from the result.php script not cleaning up input and the presence of command injection in the SUID-root binary dosu, which could lead to remote code...

Sourceforge AjaXplorer 安全漏洞

Sourceforge AjaXplorer is a Web-based file manager from Sourceforge open source. A security vulnerability exists in Sourceforge AjaXplorer versions prior to 2.6, which stems from the checkInstall.php script in the access.ssh plugin that does not properly clean up user input, potentially leading t...

WordPress plugin WP Tournament Registration 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Flex Guten 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Flex Guten, which stems from insufficient input cleanup and escaping, and can be exploited by an attacke...

WordPress plugin WPBakery Page Builder 跨站脚本漏洞

WordPress WPBakery Page Builder is a visual page builder plugin for the WordPress platform that enables complex layout design through a drag-and-drop interface to create responsive web pages without writing code. WordPress WPBakery Page Builder suffers from a cross-site scripting vulnerability th...

WordPress plugin Element Pack Elementor Addons and Templates 跨站脚本漏洞

WordPress Element Pack Elementor Addons and Templates is a powerful plugin for Elementor designed to simplify website design. A cross-site scripting vulnerability exists in WordPress Element Pack Elementor Addons and Templates, which stems from insufficient input cleanup and output escaping of th...

WordPress plugin Exclusive Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Exclusive Addons For Elementor, which stems from insufficient input cleanup and escaping, and can be exploited by a...

WordPress plugin Gutenverse 跨站脚本漏洞

WordPress Gutenverse is a WordPress plugin designed for the Gutenberg editor to provide rich site building functionality. WordPress Gutenverse suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and escaping, which can be exploited by an attacker to inject...

WordPress plugin 360 Photo Spheres 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Partner Software和Partner Software Partner Web 安全漏洞

Partner Software and Partner Software Partner Web are both products of Partner Software, a U.S.-based company.Partner Software is a geographic information system application.Partner Software Partner Web is a back-end system that provides review of reports on the Partner Software is a GIS...

WordPress plugin ShortPixel Adaptive Images 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Raidsonic IB-NAS5220和Raidsonic IB-NAS4220 安全漏洞

The Raidsonic IB-NAS5220 and Raidsonic IB-NAS4220 are both wireless routers from the German company Raidsonic. A security vulnerability exists in the Raidsonic IB-NAS5220 and Raidsonic IB-NAS4220 that stems from insufficient timeHandler.cgi endpoint input cleanup, which could lead to remote code...

zpanelx 安全漏洞

zpanelx is an open source web hosting control panel from The ZPanel Project. A security vulnerability exists in zpanelx version 10.0.0.2, which stems from insufficient input cleanup in the htpasswd module and could lead to remote code execution...

WordPress muse.ai video embedding cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress muse.ai video embedding, which stems from insufficient input cleanup and output escaping, and can be exploited by a...

WordPress Station Pro Cross-Site Scripting Vulnerability

WordPress Station Pro is a plugin designed for the WordPress platform, mainly used to enhance the functionality of the website and provide audio streaming management solutions. WordPress Station Pro suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and...