Lucene search
+L

4070 matches found

CNNVD
CNNVD
added 2025/05/15 12:0 a.m.7 views

WordPress plugin Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.8CVSS4.6AI score0.00341EPSS
SaveExploits2References1
Fedora
Fedora
added 2025/05/11 1:16 a.m.25 views

[SECURITY] Fedora 42 Update: php-adodb-5.22.9-1.fc42

ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...

10CVSS9.7AI score0.00733EPSS
SaveExploits0
OSV
OSV
added 2025/05/10 4:15 p.m.8 views

CVE-2025-4506

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

9.8CVSS5.8AI score0.00507EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/10 4:0 p.m.7 views

CVE-2025-4506 Campcodes Online Food Ordering System menu-router.php sql injection

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS7.5AI score0.00507EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/05/10 4:0 p.m.43 views

CVE-2025-4506 Campcodes Online Food Ordering System menu-router.php sql injection

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS0.00507EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/10 4:0 p.m.88 views

CVE-2025-4506

CVE-2025-4506 affects Campcodes Online Food Ordering System 1.0. The vulnerability is a SQL injection in the file /routers/menu-router.php, triggered by manipulating the argument 1_price. It is exposed remotely and has been publicly disclosed. Several connected sources corroborate the issue and t...

9.8CVSS7.5AI score0.00507EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/10 12:0 a.m.11 views

PT-2025-20632 · Unknown · Campcodes Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Food Ordering System version 1.0 Description: A critical issue was found in the Campcodes Online Food Ordering System, affecting some unknown functionality of the file /routers/menu-router.php. The manipulation of the argumen...

9.8CVSS7.4AI score0.00507EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/05/10 12:0 a.m.6 views

CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which originates from a SQL injection due to incorrect manipulation of parameter 1price in file...

9.8CVSS7.7AI score0.00507EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/05/04 4:6 a.m.34 views

CVE-2025-3748

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.9AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/02 4:15 a.m.29 views

CVE-2025-3748

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00263EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/02 4:15 a.m.15 views

CVE-2025-3748

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score0.00263EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/05/02 3:21 a.m.9 views

CVE-2025-3748 Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00263EPSS
SaveExploits0References4
CVE
CVE
added 2025/05/02 3:21 a.m.68 views

CVE-2025-3748

The CVE-2025-3748 entry concerns the WordPress plugin Taxonomy Chain Menu (Taxonomy Chain Menu) with a Stored Cross-Site Scripting (XSS) vulnerability. Affected versions are up to and including 1.0.8, where insufficient input sanitization and output escaping on user-supplied attributes in the pn_...

6.4CVSS5.7AI score0.00263EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/05/02 3:21 a.m.22 views

CVE-2025-3748 Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pnchainmenu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00263EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/02 12:0 a.m.12 views

WordPress plugin Taxonomy Chain Menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

6.4CVSS6.6AI score0.00263EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/05/02 12:0 a.m.11 views

PT-2025-18758 · WordPress · Taxonomy Chain Menu

Name of the Vulnerable Software and Affected Versions: Taxonomy Chain Menu plugin for WordPress versions up to, and including, 1.0.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the pn...

6.4CVSS6.2AI score0.00263EPSS
SaveExploits0References10
Patchstack
Patchstack
added 2025/05/01 10:5 p.m.11 views

WordPress Taxonomy Chain Menu plugin <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via pnchainmenu Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Taxonomy Chain Menu versions = 1.0.8...

6.4CVSS6.8AI score0.00263EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/25 6:14 p.m.9 views

CVE-2025-32548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in borisolhor Hamburger Icon Menu Lite allows Reflected XSS. This issue affects Hamburger Icon Menu Lite: from n/a through 1.0...

7.1CVSS8.6AI score0.00278EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/04/24 7:31 p.m.768 views

Exploit for SQL Injection in Code-Projects Patient_Record_Management_System

CVE-2025-32433 Erlang SSH Library Exploit A proof-of-concept...

10CVSS8.9AI score0.98594EPSS
SaveExploits40
NVD
NVD
added 2025/04/17 4:15 p.m.5 views

CVE-2025-32548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in borisolhor Hamburger Icon Menu Lite allows Reflected XSS. This issue affects Hamburger Icon Menu Lite: from n/a through 1.0...

7.1CVSS0.00278EPSS
SaveExploits0References1
Rows per page
Query Builder