CVE-2023-28420 WordPress Custom Options Plus Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Leo Caseiro Custom Options Plus plugin = 1.8.1 versions...

PT-2023-21707 · WordPress · Leo Caseiro Custom Options Plus

Name of the Vulnerable Software and Affected Versions: Leo Caseiro Custom Options Plus plugin versions prior to 1.8.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

leo-kofler.de Improper Access Control vulnerability OBB-3771276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39639

LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs...

CVE-2023-39639

LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs...

PT-2023-27042 · Unknown · Leotheme Leoblog

Name of the Vulnerable Software and Affected Versions: LeoTheme leoblog versions up to 3.1.2 Description: The issue is related to a SQL injection vulnerability. It affects the component LeoBlogBlog::getListBlogs. There is no information provided about the estimated number of potentially affected...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

PT-2023-26685 · Wolf Leo · Wolf-Leo Easyadmin8

Name of the Vulnerable Software and Affected Versions: Wolf-leo EasyAdmin8 version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the upload type function. This is a result of a File Upload vulnerability in the software. Recommendations: For Wolf-leo EasyAdmin8...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

CVE-2023-38915

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...

CVE-2023-38915

The CVE-2023-38915 entry refers to Wolf-leo EasyAdmin8 v.1.0 with a File Upload vulnerability in the upload type function, enabling remote arbitrary code execution. Root cause is an unrestricted file upload pathway that allows attackers to execute code on the server. Affected product/version: Wol...

leo-univ-orleans.fr Cross Site Scripting vulnerability OBB-3433510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

leo-tax.de Cross Site Scripting vulnerability OBB-3175378

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

panthera-leo.de Improper Access Control vulnerability OBB-2402953

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

leo-ce.com Cross Site Scripting vulnerability OBB-2327828

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-X38Q-XG2H-RXGX Regular Expression Denial of Service in Leo Editor

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

Regular Expression Denial of Service in Leo Editor

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

CVE-2020-23478

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

CVE-2020-23478

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...