PT-2026-107508

Name of the Vulnerable Software and Affected Versions wger versions prior to 2.6 Description Five gym management views contain a flawed gym-scope guard that fails when both compared operands are None. An authenticated trainer possessing gym.gym trainer and gym.add adminusernote permissions who is...

BIT-JOOMLA-2026-48949 Joomla! Core - [20260703] - XSS in MFA method management

Lack of validation leads to an XSS vulnerability in the MFA management views...

CVE-2026-48949

Lack of validation leads to an XSS vulnerability in the MFA management views...

EUVD-2026-42060

Lack of validation leads to an XSS vulnerability in the MFA management views...

PT-2026-56222

Name of the Vulnerable Software and Affected Versions Joomla! Core affected versions not specified Description Insufficient validation in the MFA management views allows for Cross-Site Scripting XSS, a technique where malicious scripts are injected into trusted websites. Recommendations At the...

CVE-2026-48949: Improper Neutralization of Input During Web Page Generation

Lack of validation leads to an XSS vulnerability in the MFA management views...

[20260703] - Core - XSS in MFA method management

Lack of validation leads to an XSS vulnerability in the MFA management views...

CVE-2026-34563

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when handling backup uploads and processing backup metadata. An...

CVE-2026-34563: Improper Neutralization of Input During Web Page Generation

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when handling backup uploads and processing backup metadata. An...

[20240201] - Core - Insufficient session expiration in MFA management views

The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified...

Engineers Online Portal SQL Injection Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...

PT-2021-23648

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Event Booking and Reservation System in PHP affected versions not specified Description A SQL Injection issue exists in the event-management/views component, allowing an attacker to manipulate SQL queries. This can lead t...

CVE-2021-42667: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in som...