842 matches found
CVE-2025-28909 WordPress WP No-Bot Question plugin <= 0.1.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in edwardw WP No-Bot Question wp-no-bot-question allows Cross Site Request Forgery.This issue affects WP No-Bot Question: from n/a through = 0.1.7...
CVE-2025-28909
CVE-2025-28909 describes a Cross-Site Request Forgery vulnerability in the WordPress plugin “WP No-Bot Question” (edwardw) affecting versions up to 0.1.7. Public sources (NVD/Red Hat/Patchstack) confirm the CSRF flaw but do not provide exploit details or a confirmed fixed version. CVSS 3.1 score ...
CVE-2025-28909 WordPress WP No-Bot Question plugin <= 0.1.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in edwardw WP No-Bot Question wp-no-bot-question allows Cross Site Request Forgery.This issue affects WP No-Bot Question: from n/a through = 0.1.7...
WordPress plugin WP No-Bot Question 跨站请求伪造漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in...
CVE-2025-28909: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in edwardw WP No-Bot Question wp-no-bot-question allows Cross Site Request Forgery.This issue affects WP No-Bot Question: from n/a through = 0.1.7...
Cross-site Scripting (XSS)
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to missing sanitization in the question bank filter. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious scrip...
Cross-site Scripting (XSS)
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the drag-and-drop onto image ddimageortext question type, due to missing sanitization. Details Cross-site scripting or XSS is a code vulnerability that occurs when an...
GHSA-H697-W4PH-7PCX Moodle has a stored XSS in ddimageortext question type
The drag-and-drop onto image ddimageortext question type required additional sanitizing to prevent a stored XSS risk...
GHSA-4W32-C9G7-27QX Moodle allows reflected XSS via question bank filter
The question bank filter required additional sanitizing to prevent a reflected XSS risk...
Moodle allows reflected XSS via question bank filter
The question bank filter required additional sanitizing to prevent a reflected XSS risk...
Moodle has a stored XSS in ddimageortext question type
The drag-and-drop onto image ddimageortext question type required additional sanitizing to prevent a stored XSS risk...
CVE-2025-26530
The question bank filter required additional sanitizing to prevent a reflected XSS risk...
CVE-2025-26528
The drag-and-drop onto image ddimageortext question type required additional sanitizing to prevent a stored XSS risk...
UBUNTU-CVE-2025-26530
The question bank filter required additional sanitizing to prevent a reflected XSS risk...
CVE-2025-26530 Reflected XSS via question bank filter
The question bank filter required additional sanitizing to prevent a reflected XSS risk...
CVE-2025-26530 Reflected XSS via question bank filter
The question bank filter required additional sanitizing to prevent a reflected XSS risk...
CVE-2025-26530 Reflected XSS via question bank filter
The question bank filter required additional sanitizing to prevent a reflected XSS risk...
CVE-2025-26530
CVE-2025-26530 concerns Moodle where the question bank filter allowed a reflected XSS risk due to insufficient sanitization. The connected documents corroborate a reflected XSS in Moodle’s question bank filter, without detailing affected versions or patches in the provided sources. The CVE descri...
CVE-2025-26528
CVE-2025-26528 relates to Moodle’s drag-and-drop onto image (ddimageortext) question type. Multiple connected sources confirm a stored XSS risk that required additional sanitizing in this question type. The CVE description notes the need for sanitization to prevent stored XSS, and OSV/GHSA entrie...