CVE-2024-1775

The Nextend Social Login and Register plugin for WordPress is vulnerable to a self-based Reflected Cross-Site Scripting via the ‘errordescription’ parameter in all versions up to, and including, 3.1.12 due to insufficient input sanitization and output escaping. This makes it possible for...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2021-26084 PoC | Confluence Server Webwork OGNL injectio...