3 matches found
CVE-2025-6301 PHPGurukul Notice Board System Add Notice manage-notices.php cross site scripting
A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scriptin...
CVE-2021-38328: Improper Neutralization of Input During Web Page Generation
The Notices WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /notices.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 6.1...
PT-2021-22046
Name of the Vulnerable Software and Affected Versions: Notices WordPress plugin versions up to and including 6.1 Description: The issue concerns a Reflected Cross-Site Scripting vulnerability. It is caused by a reflected $ SERVER"PHP SELF" value in the /notices.php file, allowing attackers to...