CVE-2024-27752

CSZ CMS version 1.3.0 is affected by a Cross Site Scripting (XSS) vulnerability. This flaw allows a remote attacker to execute arbitrary code via the Default Keyword field within the settings function . To mitigate this risk, users should update the software to a version that addresses the issue ...

PT-2024-24647 · WordPress · Seerox Wp Dynamic Keywords Injector

Name of the Vulnerable Software and Affected Versions: Seerox WP Dynamic Keywords Injector versions prior to 2.3.19 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations:...

Search Keyword Redirect <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The Search Keyword Redirect plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-22719

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...

CVE-2024-32080

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nick Pelton Search Keyword Redirect allows Stored XSS.This issue affects Search Keyword Redirect: from n/a through 1.0...

CVE-2024-32080 WordPress Search Keyword Redirect plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nick Pelton Search Keyword Redirect allows Stored XSS.This issue affects Search Keyword Redirect: from n/a through 1.0...

CVE-2024-32080 WordPress Search Keyword Redirect plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nick Pelton Search Keyword Redirect allows Stored XSS.This issue affects Search Keyword Redirect: from n/a through 1.0...

CVE-2024-32080

CVE-2024-32080 is a Stored XSS in the WordPress plugin Search Keyword Redirect (Nick Pelton). The issue is described as Improper Neutralization of Input During Web Page Generation in the plugin, affecting versions from n/a through 1.0. No exploit details or patches are provided in the connected d...

WordPress Search Keyword Redirect plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Search Keyword Redirect versions = 1.0...

CVE-2024-22719: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...

CVE-2024-22719

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...

CVE-2024-22719

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...

CVE-2024-22719

An SQL Injection vulnerability exists in Form Tools version 3.1.1 . The flaw originates from the improper neutralization of special elements in the 'keyword' parameter used when searching for a client. This allows an attacker to execute arbitrary SQL commands by manipulating the search functional...

PT-2024-24385 · Unknown · Search Keyword Redirect

Name of the Vulnerable Software and Affected Versions: Search Keyword Redirect versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-19538 · Unknown · Form Tools

Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: The issue allows attackers to run arbitrary SQL commands via the keyword when searching for a client. This can be exploited by manipulating the search functionality. Recommendations: For Form Tools versio...

WordPress Plugin Search Keyword Redirect 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin Search Keyword Redirect A cross-si...

CVE-2024-32080: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nick Pelton Search Keyword Redirect allows Stored XSS.This issue affects Search Keyword Redirect: from n/a through 1.0...

Form Tools SQL注入漏洞

Form Tools is an open source codebase for Form Tools scripts, modules, themes and APIs. A SQL injection vulnerability exists in Form Tools version 3.1.1, which originates from allowing an attacker to run arbitrary SQL commands via keyword while searching for clients...

WordPress Search Keyword Redirect Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Search Keyword Redirect Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32080 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9a5522e4a000 Credits Sharanabasappa Required privilege...

PT-2024-25893 · Wangshen · Wangshen Secgate 3600

Name of the Vulnerable Software and Affected Versions: Wangshen SecGate 3600 up to 20240408 Description: A critical issue affects an unknown part of the file "/?g=net pro keyword import save". The manipulation of the reqfile argument leads to unrestricted upload. It is possible to initiate the...