10693 matches found
WordPress Table of Contents Plus plugin <= 2411 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Table of Contents Plus versions = 2411...
CVE-2024-9459
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...
CVE-2024-9459
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...
CVE-2024-5578
The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2024-5578
The CVE-2024-5578 entry concerns Table of Contents Plus (WordPress plugin) up to version 2408. Connected sources confirm a root cause of insufficient sanitisation/escaping of some plugin settings, enabling stored XSS by high-privilege users (e.g., editors) and while unfiltered_html is disallowed....
CVE-2024-9459 SQL Injection
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...
CVE-2024-9459
CVE-2024-9459 affects Zoho ManageEngine Exchange Reporter Plus up through version 5718 and earlier. The security issue is described as an authenticated SQL Injection in the reports module. The connected sources specifically list the affected software and version range, with remediation guidance r...
CVE-2024-9459 SQL Injection
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...
ZOHO ManageEngine Exchange Reporter Plus 安全漏洞
ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5718 and prior versions that stems from vulnerability to authenticated SQL injection in the reporting module...
WordPress Table of Contents Plus Plugin <= 2411 is vulnerable to Cross Site Scripting (XSS)
Software Table of Contents Plus Type Plugin Vulnerable versions = 2411 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5578 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 487fd7341438 Credits Dmitrii Ignatyev...
WordPress Basticom Framework plugin <= 1.5.0 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability
Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Basticom Framework versions = 1.5.0...
CVE-2024-36485
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...
CVE-2024-36485
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...
CVE-2024-48878
Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report...
CVE-2024-36485 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...
CVE-2024-36485
The CVE-2024-36485 entry concerns Zohocorp ManageEngine ADAudit Plus. Affected product: ADAudit Plus (ManageEngine) prior to version 8121. Vulnerability: SQL Injection in the Technician reports option, caused by improper handling of input in that feature. Impact: potential unauthorized access to ...
CVE-2024-36485 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...
CVE-2024-48878
CVE-2024-48878 concerns Zohocorp ManageEngine ADManager Plus, specifically versions 7241 and earlier. Public sources describe an SQL Injection vulnerability in the Archived Audit Report component. The CVE entries and connected feeds consistently identify this affected product and the root cause a...