33 matches found
CVE-2026-119073
The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its post-listing module shortcodes before outputting it in an HTML attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...
EUVD-2026-118940
The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its post-listing module shortcodes before outputting it in an HTML attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2026-119073
The Live Composer WordPress plugin, in versions prior to 2.1.23 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to escape a pagination setting provided via post-listing module shortcodes before it is rendered within an HTML attribute . This flaw allows users w...
CVE-2026-119073 Live Composer < 2.1.23 - Contributor+ Stored XSS via Post Module Pagination
The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its post-listing module shortcodes before outputting it in an HTML attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2025-67274
An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...
PT-2026-4773
Name of the Vulnerable Software and Affected Versions aangine version 2025.2 Description An issue allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, and portfolio-item-service dat...
CVE-2025-67274
An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...
EUVD-2022-5472
Malicious code in bioql PyPI...
SUSE CVE-2008-7177
Buffer overflow in the listing module in Netwide Assembler NASM before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719...
GHSA-W38G-HJ45-MJJP Contao SQL injection in the backend and listing module
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the backend as well as in the listing module...
Contao SQL injection in the backend and listing module
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the backend as well as in the listing module...
CVE-2017-16558
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module...
CVE-2017-16558
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module...
CVE-2017-16558
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module...
CVE-2017-16558
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module...
CVE-2017-16558
CVE-2017-16558 affects Contao up to versions 3.5.30 and 4.4.x (specifically 4.0.0 to 4.4.7) with an SQL injection vulnerability in the backend and in the listing module. The connected documents confirm this vulnerability is in Contao’s file/backend interfaces and that it can be triggered via user...
CVE-2017-16558
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module...
CVE-2017-16558: Improper Neutralization of Special Elements used in an SQL Command
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module...
PT-2019-8137
Name of the Vulnerable Software and Affected Versions Contao versions 3.0.0 through 3.5.30 Contao versions 4.0.0 through 4.4.7 Description The issue is an SQL injection vulnerability that affects both the back end and the listing module. Recommendations For Contao versions 3.0.0 through 3.5.30,...
