143 matches found
Malicious code in @zalastax/nolb-lin (npm)
The package @zalastax/nolb-lin was found to contain malicious code...
MAL-2025-43279 Malicious code in @zalastax/nolb-lin (npm)
The package @zalastax/nolb-lin was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-lin (npm)
The package @zalastax/nolb-lion-lin was found to contain malicious code...
MAL-2025-12230 Malicious code in @zalastax/nolb-lion-lin (npm)
The package @zalastax/nolb-lion-lin was found to contain malicious code...
CVE-2024-41601
Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component...
CVE-2022-44244
An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...
CVE-2022-32430
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...
CVE-2020-18701
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets...
CVE-2020-18698
Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'...
CVE-2020-18699
Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...
CVE-2024-53748
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Mermaid wp-mermaid allows Stored XSS.This issue affects WP Mermaid: from n/a through = 1.0.2...
CVE-2024-53748
CVE-2024-53748 affects the WordPress WP Mermaid plugin (versions
CVE-2024-53758
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP MathJax wp-mathjax-plus allows Stored XSS.This issue affects WP MathJax: from n/a through = 1.0.1...
CVE-2024-53758 WordPress WP MathJax plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP MathJax wp-mathjax-plus allows Stored XSS.This issue affects WP MathJax: from n/a through = 1.0.1...
CVE-2024-53758
CVE-2024-53758 describes a Stored XSS in the WordPress WP MathJax plugin
CVE-2024-52422 WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Githuber MD wp-githuber-md allows Stored XSS.This issue affects WP Githuber MD: from n/a through = 1.16.3...
CVE-2024-52422
CVE-2024-52422 is a stored XSS in the WordPress plugin WP Githuber MD (WordPress plugin: WP Githuber MD). Affected versions are ≤ 1.16.3. The root cause is improper input neutralization during web page generation, enabling stored cross-site scripting. Public data (Patchstack/RedHat/ENISA) identif...
CVE-2024-52422 WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Githuber MD wp-githuber-md allows Stored XSS.This issue affects WP Githuber MD: from n/a through = 1.16.3...