CVE-2026-85016 Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter processor, allowing users with Contributor access who do not hold unfilteredhtml to store a payload that executes when th...

CVE-2026-85016 Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter processor, allowing users with Contributor access who do not hold unfilteredhtml to store a payload that executes when th...

EUVD-2007-4868

Malware in sbrugna...

CVE-2025-46102

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...

SUSE CVE-2007-4887

The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in the library parameter. NOTE: there are limited usage scenarios under which this would be a vulnerability...

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

CVE-2021-36880

Unauthenticated SQL Injection SQLi vulnerability in WordPress uListing plugin versions = 2.0.3, vulnerable parameter: custom...

CVE-2007-4887

The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in the library parameter. NOTE: there are limited usage scenarios under which this would be a vulnerability...

CVE-2007-4887: Improper Input Validation

The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in the library parameter. NOTE: there are limited usage scenarios under which this would be a vulnerability...