18 matches found
EUVD-2025-10599
Malicious code in bioql PyPI...
EUVD-2025-25377
Malicious code in bioql PyPI...
CVE-2025-48152
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dimafreund Rentsyst rentsyst allows Reflected XSS.This issue affects Rentsyst: from n/a through = 2.0.100...
CVE-2025-48152
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dimafreund Rentsyst rentsyst allows Reflected XSS.This issue affects Rentsyst: from n/a through = 2.0.100...
CVE-2025-48152
CVE-2025-48152 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin RentSyst (Rentsyst) version up to 2.0.100. The root cause is improper neutralization of input during web page generation, enabling XSS payloads to be reflected. The CVSS v3.1 vector indicates a N...
CVE-2025-48152 WordPress Rentsyst Plugin <= 2.0.100 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dimafreund Rentsyst allows Reflected XSS. This issue affects Rentsyst: from n/a through 2.0.100...
CVE-2025-48152 WordPress Rentsyst Plugin <= 2.0.100 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dimafreund Rentsyst rentsyst allows Reflected XSS.This issue affects Rentsyst: from n/a through = 2.0.100...
PT-2025-33914 · Rentsyst · Rentsyst
Name of the Vulnerable Software and Affected Versions: Rentsyst versions through 2.0.100 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Reflected Cross-site Scripting XSS. Recommendations: Update Rentsyst to a version later than...
WordPress plugin Rentsyst 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress Rentsyst Plugin <= 2.0.100 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by stealthcopter in WordPress Plugin Rentsyst versions = 2.0.100...
CVE-2025-32501
Cross-Site Request Forgery CSRF vulnerability in dimafreund Rentsyst rentsyst allows Stored XSS.This issue affects Rentsyst: from n/a through = 2.0.92...
CVE-2025-32501
Cross-Site Request Forgery CSRF vulnerability in dimafreund Rentsyst rentsyst allows Stored XSS.This issue affects Rentsyst: from n/a through = 2.0.92...
CVE-2025-32501 WordPress RentSyst plugin <= 2.0.92 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in dimafreund Rentsyst rentsyst allows Stored XSS.This issue affects Rentsyst: from n/a through = 2.0.92...
CVE-2025-32501
CVE-2025-32501 (RentSyst) affects RentSyst (fleet management CRM) version
CVE-2025-32501 WordPress RentSyst plugin <= 2.0.92 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in dimafreund RentSyst allows Stored XSS.This issue affects RentSyst: from n/a through 2.0.92...
WordPress RentSyst plugin <= 2.0.92 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Rentsyst versions = 2.0.92...
WordPress plugin RentSyst 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...
PT-2025-15780 · Dimafreund · Rentsyst
Name of the Vulnerable Software and Affected Versions: dimafreund RentSyst versions n/a through 2.0.72 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web applicatio...