WordPress plugin New Simple Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin Search Cloud One 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Ibtana – Ecommerce Product Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

PT-2025-36213

Name of the Vulnerable Software and Affected Versions: josepsitjar StoryMap versions n/a through 2.1 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update josepsitjar StoryMap to a...

WordPress plugin Course Booking Platform 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2025-36242

Name of the Vulnerable Software and Affected Versions: GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership versions n/a through 1.6.6 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for...

WordPress plugin Pushe Web Push Notification 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2024-12974

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting XSS. This issue affects ProKuaför: from s1.02.07 before v1.02.08...

CVE-2024-12972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

CVE-2024-13073

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft TaskPano allows Cross-Site Scripting XSS. This issue affects TaskPano: s1.06.04...

CVE-2024-13071

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft e-Mutabakat allows Cross-Site Scripting XSS. This issue affects e-Mutabakat: from 2.02.05 before v2.02.06...

CVE-2024-13073

CVE-2024-13073 affects Akinsoft TaskPano version s1.06.04, where an improper neutralization of input during web page generation enables cross-site scripting (XSS). The issue is documented across multiple sources (Red Hat, NVD/CVE records, and add. PT-2025-35897). Root cause: input is not properly...

CVE-2024-13073

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft TaskPano allows Cross-Site Scripting XSS. This issue affects TaskPano: s1.06.04...

CVE-2024-13073 XSS in Akinsoft's TaskPano

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft TaskPano allows Cross-Site Scripting XSS. This issue affects TaskPano: s1.06.04...

OS Command Injection

github.com/olivetin/olivetin is vulnerable to OS Command Injection. The vulnerability is due to improper handling of user input in the ParseRequestURI function in service/internal/executor/arguments.go, which allows an attacker to inject and execute arbitrary operating system commands...

CVE-2024-13071 XSS in Akinsoft's e-Mutabakat

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft e-Mutabakat allows Cross-Site Scripting XSS. This issue affects e-Mutabakat: from 2.02.05 before v2.02.06...

CVE-2025-55472

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...

PT-2025-35897

Name of the Vulnerable Software and Affected Versions: Akinsoft TaskPano version s1.06.04 Description: Akinsoft TaskPano is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the execution of malicious scripts within...

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in /admin/updateorder.php, which can be exploited by an attacker to execute arbitrary web script o...

appRain CMF 跨站脚本漏洞

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which stems from the lack of effective filtering and escaping of user-supplied data in the /apprain/developer/addons parameter page, which can be exploited by an attacker to steal a victim's...