PT-2022-9635

Name of the Vulnerable Software and Affected Versions Contact Form Entries WordPress plugin versions prior to 1.2.4 Description The issue concerns the Contact Form Entries WordPress plugin, which does not properly sanitise and escape various parameters, including form id, status, end date, order,...

CVE-2019-15618: Improper Neutralization of Input During Web Page Generation

Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location...