7 matches found
CVE-2022-0441
在 WordPress 上的 MasterStudy LMS Plugin（WordPress 插件）2.7.5 及之前版本中发现了一个被归类为严重的漏洞。该漏洞影响 New Account Handler 组件的某个未知部分。对未知输入进行操纵会导致权限管理漏洞。该漏洞的 CWE 定义为 CWE-269。该软件未能正确地为参与者分配、修改、跟踪或检查权限，从而为该参与者创建了非预期的控制范围。已知其影响会危害机密性、完整性和可用性。 该弱点于 03/07/2022 以编号 2667195 披露。公告可在 wpscan.com 获取。该漏洞自 02/01/2022 起被命名为...
CVE-2022-0441
MasterStudy LMSプラグイン（WordPressプラグイン）バージョン2.7.5以前に、深刻度「critical」に分類される脆弱性が発見されました。この脆弱性は、New Account Handlerコンポーネントの未知の部分に影響を与えます。未知の入力を操作することにより、特権管理の脆弱性が引き起こされます。この脆弱性のCWE定義はCWE-269です。ソフトウェアは、アクターに対して特権を適切に割り当て、変更、追跡、またはチェックしないため、そのアクターに意図しない制御範囲が生じます。影響としては、機密性、完全性、および可用性に影響を与えることが知られています。...
CVE-2024-1024
A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input leads to cross site scripting. The attack...
CVE-2024-1024
A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...
Cross site scripting
A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...
CVE-2024-1024 SourceCodester Facebook News Feed Like New Account cross site scripting
A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...
