EUVD-2024-34311

Malicious code in bioql PyPI...

EUVD-2022-2455

Malicious code in bioql PyPI...

CVE-2024-9669

The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fmlocale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute...

CVE-2024-11010 FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion

The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.1.4 via the 'defaultlang' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, ...

WordPress FileOrganizer plugin <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion vulnerability

Authenticated Administrator+ Local JavaScript File Inclusion vulnerability discovered by TANG Cheuk Hei siunam in WordPress Plugin FileOrganizer versions = 1.1.4...

CVE-2024-9669

The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fmlocale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute...

GitBook allows Cross-site Scripting via a local .md file.

GitBook through 2.6.9 allows Cross-site Scripting via javascript inclusion in a local .md file...

Moodle Cross-Site Scripting Vulnerability (CNVD-2021-28738)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that could allow JavaScript to be included in the title of a book chapter without being...

CVE-2020-25631

A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the "Add new chapter" page. This is fixed in 3.9.2, 3.8.5 and 3.7.8...

Cygnux sysPass Local File Inclusion Vulnerability

Cygnux sysPass is an open source multi-user password manager that features easy installation, a clear interface and multi-user options. A local file inclusion vulnerability exists in the javascript file inclusion feature in Cygnux sysPass 2.1.7 and earlier versions. An attacker can exploit this...

Crossite scripting in Mailman

Можно включить javascript в URL...