CVE-2022-1560: Improper Limitation of a Pathname to a Restricted Directory

The Amministrazione Aperta WordPress plugin before 3.8 does not validate the open parameter before using it in an include statement, leading to a Local File Inclusion issue. The original advisory mentions that unauthenticated users can exploit this, however the affected file generates a fatal err...

CVE-2008-0541: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 open and 2 dateshow parameters...