422 matches found
EUVD-2025-211057
The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it...
CVE-2026-87782
The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as a subscriber, to grant themselves the Administrator role...
CVE-2025-14221
描述 1. CVE-2025-14221 2. 发现者：Fatma Trabelsi 3. 产品供应商：SourceCodester 4. 受影响产品：Online Banking System 1.0 POC 在应用程序的用户资料更新功能中存在一个存储型跨站脚本（XSS）漏洞。应用程序未能正确清理用户在“名字”字段中提供的输入，就将其存储到数据库中并在多个页面上渲染。...
CVE-2026-87782 Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administrator
The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as a subscriber, to grant themselves the Administrator role...
CVE-2026-87782 Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administrator
The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as a subscriber, to grant themselves the Administrator role...
CVE-2026-87782
The Koinonia Link WordPress plugin (versions before 1.1.5 , specifically 1.1.2-1.1.4 ) contains a privilege escalation vulnerability. The plugin fails to verify if a user has the necessary permissions to modify roles when saving a role selection during a profile update. This flaw allows any authe...
CVE-2024-10557
受影响版本： 血液银行管理系统 ：1.0 漏洞信息： 漏洞类型： 跨站请求伪造（CSRF） 严重性： 高 状态： 未修补 脆弱端点： 路径： /file/updateprofile.php 漏洞描述： 端点 /file/updateprofile.php 存在一个CSRF漏洞，允许远程用户更新医院用户的详细信息，并可能导致账户接管，因为攻击者可以更新从电子邮件到密码的所有信息，从而有效增加账户接管的机会。 成功利用可能导致代表受害者执行未授权操作，例如删除数据 。此外，受害者访问带有payload的恶意网站也可触发此漏洞。 概念验证（PoC）： 下面是一个CSRF POC攻击...
roller-csrf
Apache Roller v6.1.2 - 配置文件更新中的跨站请求伪造 CSRF 漏洞详情 版本 : v6.1.2 日期 : 2025-11-09 漏洞发现者 : Van Lam Nguyen Facebook : https://www.facebook.com/vanlam1412 厂商主页 : https://roller.apache.org 软件链接 : https://github.com/apache/roller/archive/refs/tags/roller-6.1.2.zip 测试环境 : Windows CVE : 无 演示 :...
EUVD-2026-91851
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoints, which execute in victims' browser...
CVE-2026-104475
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoints, which execute in victims' browser...
CVE-2026-104475: Improper Neutralization of Input During Web Page Generation
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoints, which execute in victims' browser...
CVE-2026-104475 IDURAR ERP CRM through 4.1.1 Stored XSS via SVG Upload
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoints, which execute in victims' browser...
CVE-2026-104475 IDURAR ERP CRM through 4.1.1 Stored XSS via SVG Upload
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoints, which execute in victims' browser...
CVE-2026-104475
IDURAR ERP CRM, versions through 4.1.1 , is vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is the application's failure to sanitize SVG files during the upload process. Authenticated users can exploit this by uploading JavaScript-laden SVGs via the profile update or settin...
CVE-2026-104475 IDURAR ERP CRM through 4.1.1 Stored XSS via SVG Upload
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoints, which execute in victims' browser...
PT-2026-104457
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoints, which execute in victims' browser...
PT-2026-98395
Name of the Vulnerable Software and Affected Versions wpForo Forum versions prior to 3.1.7 Description Stored Cross-Site Scripting occurs via the 'telegram' profile field due to insufficient input sanitization and output escaping in the profile update action. The raw $ POST'data' array is copied...
PT-2026-95282
Name of the Vulnerable Software and Affected Versions Mapster WP Maps versions prior to 1.23.1 Description The plugin contains an Arbitrary User Meta Write flaw within the my profile update function. The issue occurs because the function fails to perform nonce verification, capability checks, and...
CVE-2026-82519
The Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check in the profile-page update handler. An authenticated low-privileged attacker can submit a crafted POST request omitting the two-factor-authentication field, which skips nonce verification and trigg...
EUVD-2026-77771
Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vulnerability that allows authenticated low-privileged attackers to bypass enforced two-factor authentication indefinitely by exploiting an unguarded code path in the profile-page update handler...