WordPress plugin VibeBP SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin...

PT-2024-36672 · Unknown · Ibnuyahya Category Post Shortcode

Name of the Vulnerable Software and Affected Versions: ibnuyahya Category Post Shortcode versions 2.4 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the ibnuyahya...

CVE-2024-47917

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-47920 Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross-site Scripting (XSS)

shuchkin/simplexlsx is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input handling because the toHTMLEx method allows the execution of arbitrary JavaScript code...

Boa Webserver 跨站脚本漏洞

Boa Webserver is a lightweight and efficient web server software. A cross-site scripting vulnerability exists in Boa Webserver, which stems from improper input neutralization during web page generation, resulting in a cross-site scripting vulnerability...

PT-2024-32901 · Tecnick · Tcexam

Name of the Vulnerable Software and Affected Versions: Tecnick TCExam affected versions not specified Description: The issue is related to Cross-site Scripting XSS due to improper neutralization of input during web page generation. This can lead to the execution of malicious scripts on the...

Tiki wiki cms 跨站脚本漏洞

Tiki wiki cms is a website CMS. A cross-site scripting vulnerability exists in Tiki wiki cms versions prior to version 28, which stems from a cross-site scripting vulnerability due to an improper neutralization of inputs during page generation...

PT-2024-32900 · Unknown · Boa Web Server

Name of the Vulnerable Software and Affected Versions: Boa web server affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows attackers to inject malicious scripts into we...

PT-2024-32892 · Mobotix · Cctv Fw

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This is a type of security...

Tiki wiki cms 操作系统命令注入漏洞

Tiki wiki cms is a website CMS. An operating system command injection vulnerability exists in versions of Tiki wiki cms prior to 28, which stems from improper input neutralization during page generation...

Arne Informatics Piramit Automation SQL注入漏洞

Arne Informatics Piramit Automation is an application from Arne Informatics, Inc. An SQL injection vulnerability exists in Arne Informatics Piramit Automation versions prior to 27.09.2024 that stems from an improper neutralization of a special element...

WordPress plugin DirectoryPress 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

Reflected Cross-Site Scripting (Reflected XSS)

Liferay Portal is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to improper handling of user input in the Dispatch name field, allowing remote attackers to execute arbitrary web script or HTML...

PT-2024-10472

Name of the Vulnerable Software and Affected Versions Koji affected versions not specified Description The issue is related to improper neutralization of input during web page generation, allowing for a reflected XSS attack. An unsanitized input can lead to an XSS attack, where harmful JavaScript...

The vulnerability in the mainfunction.cgi web interface of the DrayTek Vigor router software allows a hacker to execute arbitrary code.

The vulnerability in the mainfunction.cgi web interface of the DrayTek Vigor router software exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DEBIAN-CVE-2024-47093

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

UBUNTU-CVE-2024-47093

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

WordPress plugin Fusion 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...