CVE-2024-6729

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /control/addact.php. The manipulation of the argument aname leads to sql injection. The attack can be initiated...

CVE-2024-6729

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /control/addact.php. The manipulation of the argument aname leads to sql injection. The attack can be initiated...

CVE-2024-6729

CVE-2024-6729 affects SourceCodester Kortex Lite Advocate Office Management System 1.0. The vulnerability is in the /control/add_act.php file where the aname parameter can be manipulated to trigger SQL injection. The issue is exploitable remotely and exploits have been disclosed publicly. Connect...

CVE-2024-6729 SourceCodester Kortex Lite Advocate Office Management System add_act.php sql injection

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /control/addact.php. The manipulation of the argument aname leads to sql injection. The attack can be initiated...

CVE-2024-6729 SourceCodester Kortex Lite Advocate Office Management System add_act.php sql injection

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /control/addact.php. The manipulation of the argument aname leads to sql injection. The attack can be initiated...

CVE-2024-3963 RafflePress Lite < 1.12.14 - Editor+ Stored XSS

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...

CVE-2024-3963 RafflePress Lite < 1.12.14 - Editor+ Stored XSS

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...

PT-2024-5264 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue has been identified in the system, specifically affecting the /control/add act.php file. The manipulation of the aname argument leads to SQ...

CVE-2024-5902 UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter

The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name parameter in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it...

CVE-2024-5902

CVE-2024-5902 affects the WordPress plugin User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds. The issue is Stored Cross-Site Scripting via the name parameter in all versions up to 1.0.15, allowing unauthenticated attackers to inject scripts that run when a high-...

CVE-2024-37939

Cross-Site Request Forgery CSRF vulnerability in VolThemes Patricia Lite.This issue affects Patricia Lite: from n/a through 1.2.3...

CVE-2024-37213

Cross-Site Request Forgery CSRF vulnerability in guru-aliexpress AliNext ali2woo-lite allows Cross Site Request Forgery.This issue affects AliNext: from n/a through = 3.4.6...

CVE-2024-37939 WordPress Patricia Lite theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in VolThemes Patricia Lite.This issue affects Patricia Lite: from n/a through 1.2.3...

CVE-2024-37939

CVE-2024-37939 is a CSRF vulnerability in VolThemes Patricia Lite affecting Patricia Lite from n/a through 1.2.3. The description and connected Red Hat entry confirm CSRF as the issue; no public exploit details are provided in the documents. CVSS 3.1 base score 4.3 (Medium); attack vector Network...

CVE-2024-37939 WordPress Patricia Lite theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in VolThemes Patricia Lite.This issue affects Patricia Lite: from n/a through 1.2.3...

CVE-2024-37213

CVE-2024-37213 is described as a CSRF to XSS vulnerability in the WordPress plugin Ali2Woo Lite, affecting Ali2Woo Lite versions up to 3.3.9. The connected sources confirm the issue type and affected version range but do not provide a public fix version or detailed root-cause exploitation steps w...

CVE-2024-37213 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in guru-aliexpress AliNext ali2woo-lite allows Cross Site Request Forgery.This issue affects AliNext: from n/a through = 3.4.6...

Malicious code in cx-api-client-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 315d3186e692fd6934de0d66c25255e03eb763a15daa0785e92e58a2abbbba60 The OpenSSF Package Analysis project identified 'cx-api-client-lite' @ 200.0.1 npm as malicious. It is considered malicious because: - The packa...

WordPress plugin Patricia Lite Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-27381 · Unknown · Ali2Woo Lite

Name of the Vulnerable Software and Affected Versions: Ali2Woo Lite versions 3.3.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Cross-Site Scripting XSS. Recommendations: For Ali2Woo Lite versions 3.3.9 and earlier, update to a...