GHSA-C7FM-JX59-WJF6 Authorization Bypass Through User-Controlled Key in LiveHelperChat

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

Authorization Bypass Through User-Controlled Key in LiveHelperChat

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

CVE-2022-0323

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

CVE-2022-0323

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

Input validation

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

GHSA-PM3V-QXF6-FGXV Cross-site Scripting in pimcore

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

Cross-site Scripting in pimcore

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

Cross-site Scripting in microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

GHSA-M8RP-Q82R-C5MF Cross-site Scripting in microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

GHSA-7WV8-G97R-432H Exposure of Sensitive Information to an Unauthorized Actor in microweber

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

Exposure of Sensitive Information to an Unauthorized Actor in microweber

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

GHSA-P5HJ-XXFR-PWC3 Code Injection in microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

Code Injection in microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0323 Improper Neutralization of Special Elements Used in a Template Engine in bobthecow/mustache.php

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

CVE-2022-0323

CVE-2022-0323 refers to an issue in the Packagist mustache/mustache template engine: improper neutralization of special elements in templates prior to version 2.14.1. Multiple connected sources reiter this vulnerability affecting the mustache library used in various apps (e.g., Moodle references)...

CVE-2022-0323 Improper Neutralization of Special Elements Used in a Template Engine in bobthecow/mustache.php

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

CVE-2022-0285

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

CVE-2022-0285 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

CVE-2022-0285

CVE-2022-0285 describes a stored XSS in pimcore/pimcore before version 10.2.9 due to improper validation of client-side data. Affected product: pimcore/pimcore; vulnerability type: Cross-site Scripting (XSS); root cause: lack of proper validation in the WEB application. Impact is cross-site scrip...