CVE-2025-25088 WordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor allows Stored XSS. This issue affects WP Keyword Monitor: from n/a through 1.0.5...

CVE-2025-25088 WordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor wp-keyword-monitor allows Cross Site Request Forgery.This issue affects WP Keyword Monitor: from n/a through = 1.0.5...

CVE-2025-25088

CVE-2025-25088 corresponds to a Cross-Site Request Forgery to Stored XSS vulnerability in the WordPress plugin WP Keyword Monitor (affected versions: up to 1.0.5). The connected sources describe the issue as CSRF that allows stored XSS, but do not provide concrete details about specific vulnerabl...

PT-2025-5923

Name of the Vulnerable Software and Affected Versions WP Keyword Monitor versions 1.0.5 and earlier Description A Cross-Site Request Forgery CSRF issue in WP Keyword Monitor allows for Stored XSS. This means an attacker can trick a user into performing unintended actions on the web application,...

WordPress plugin WP Keyword Monitor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-25088: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor wp-keyword-monitor allows Cross Site Request Forgery.This issue affects WP Keyword Monitor: from n/a through = 1.0.5...

CVE-2022-41878

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 5.3.2 or 4.10.19, keywords that are specified in the Parse Server option requestKeywordDenylist can be injected via Cloud Code Webhooks or Triggers. This will result in the...

WordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP Keyword Monitor versions = 1.0.5...

RuoYi 安全漏洞

RuoYi is a backend management system by the individual developer of RuoYi in China. A security vulnerability exists in RuoYi v.4.7.9 and earlier versions, which is caused by the ilterKeyword method not completely filtering SQL injected keywords...

mblog 代码注入漏洞

mblog is a blogging system by langhsu individual developer. A code injection vulnerability exists in mblog version 3.5.0, which stems from the parameter kw in the file /search that leads to cross-site scripting...

PT-2025-1747 · Unknown · Ars Affiliate Page Plugin

Name of the Vulnerable Software and Affected Versions: ARS Affiliate Page Plugin versions up to, and including, 2.0.2 Description: The issue is related to Reflected Cross-Site Scripting via the utm keyword parameter due to insufficient input sanitization and output escaping. This allows...

WordPress plugin ARS Affiliate Page Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

CVE-2024-12842

A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...

CVE-2024-12841

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-12842: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...

CVE-2024-12841: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-28145

The Image Access Scan2Net software (versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier) is vulnerable to an unauthenticated SQL injection . An attacker can exploit the /class/dbconnect.php file by supplying malicious GET parameters, specifically the search, table, field, and value...

CVE-2024-12479

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2 and classified as critical. This issue affects the function searchTopicByKeyword of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\TopicDao.java. The manipulation of the argument keyword leads to sql injection. The...

CVE-2024-11242

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...