PT-2025-12590

Name of the Vulnerable Software and Affected Versions Cristian Sarov Upload Quota per User versions 1.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

CVE-2025-30537: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristian Sarov Upload Quota per User upload-quota-per-user allows Stored XSS.This issue affects Upload Quota per User: from n/a through = 1.3...

CVE-2024-9205

The Maximum Products per User for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.2.8. This makes it possible for unauthenticated attackers to inject...

WordPress plugin “Maximum Products per User for WooCommerce” – Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin Maximum...

CVE-2024-9205: Improper Neutralization of Input During Web Page Generation

The Maximum Products per User for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.2.8. This makes it possible for unauthenticated attackers to inject...

WordPress Maximum Products per User for WooCommerce plugin <= 4.2.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Maximum Products per User for WooCommerce versions = 4.2.8...

Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing

Impact Affected configurations: - Single-origin JupyterHub deployments - JupyterHub deployments with user-controlled applications running on subdomains or peer subdomains of either the Hub or a single-user server. By tricking a user into visiting a malicious subdomain, the attacker can achieve an...

PT-2024-22348

Name of the Vulnerable Software and Affected Versions JupyterHub versions prior to 4.1.0 Description The issue allows an attacker to achieve an XSS directly affecting a user's session by tricking them into visiting a malicious subdomain. This could lead to full access to the JupyterHub API and th...

PT-2024-4137 · Unknown · Wix Toolset

Name of the Vulnerable Software and Affected Versions: WiX Toolset versions prior to 3.14.1 WiX Toolset versions prior to 4.0.5 Description: The custom action behind WiX's RemoveFolderEx functionality could allow a standard user to delete protected directories. RemoveFolderEx deletes an entire...

WordPress Plugin Theme per user code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2023-31936

Name of the Vulnerable Software and Affected Versions Presslabs Theme per user versions n/a through 1.0.1 Description The issue is related to Deserialization of Untrusted Data, which affects the Presslabs Theme per user. There is no information provided about the estimated number of potentially...

CVE-2023-52181: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Presslabs Theme per user.This issue affects Theme per user: from n/a through 1.0.1...

WordPress Theme per user Plugin <= 1.0.1 is vulnerable to PHP Object Injection

Software Theme per user Type Plugin Vulnerable versions = 1.0.1 Fixed in 1.0.2 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52181 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 74baf7cbbeba Credits Rafie Muhammad Patchstack Required privile...

“per-user-override” function in Cisco Security Bypass

The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD microprogramming systems relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to bypass the configured...

“per-user-override” function in Cisco Security Bypass

The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD microprogramming systems relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to bypass the configured...

CVE-2023-20245

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

CVE-2023-20256

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

CVE-2023-20245

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

CVE-2023-20256

CVE-2023-20256 relates to multiple vulnerabilities in the per-user-override feature of Cisco ASA and FTD software that could let an unauthenticated, remote attacker bypass ACLs and reach normally protected resources. The root cause is a logic error in how per-user-override rules are constructed/a...

PT-2023-7556 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: Multiple vulnerabilities in the per-user-override feature could allow an...