Linux Distros Unpatched Vulnerability : CVE-2022-21222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr...

related-posts-for-wp 跨站脚本漏洞

related-posts-for-wp is a library by Barry Kooij, a personal developer. It is used to interlink WordPress related posts with a single click. A cross-site scripting vulnerability exists in related-posts-for-wp versions prior to 2.1.3. An attacker can exploit this vulnerability to conduct cross-sit...

GHSA-HWJ3-M3P6-HJ38 dom4j allows External Entities by default which might enable XXE attacks

dom4j before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j. Note: This advisory applies to dom4j:dom4j...