4571 matches found
PT-2023-28953 · Unknown · Oscommerce
Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the tax class title parameter. This could potentially lead to unauthorized...
PT-2023-30798 · WordPress · Wordpress File Sharing Plugin
Name of the Vulnerable Software and Affected Versions: WordPress File Sharing Plugin versions prior to 2.0.5 Description: The issue allows users to gain access to files and folders by manipulating IDs, which can be easily brute forced, due to a lack of authorization checks. Recommendations: For...
PT-2023-28930 · Unknown · Oscommerce
Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the admin firstname parameter, potentially leading to unauthorized execution of...
PT-2023-20545 · Tibco Software · Tibco Nimbus
Name of the Vulnerable Software and Affected Versions: TIBCO Nimbus versions 10.6.0 and below Description: The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities. These vulnerabilities allow a low privileged...
PT-2023-31582
Name of the Vulnerable Software and Affected Versions Hospital management system version 378c157 Description The hospital management system is vulnerable to SQL injection SQLI, which allows attackers to bypass authentication. This issue is related to the application's susceptibility to SQLI...
CVE-2023-41861
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Restrict plugin = 2.2.4 versions...
CVE-2023-41861
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Restrict plugin = 2.2.4 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Restrict plugin = 2.2.4 versions...
PT-2023-31961 · WordPress · Font Awesome More Icons
Name of the Vulnerable Software and Affected Versions: Font Awesome More Icons plugin for WordPress versions up to, and including, 3.5 Description: The issue is related to Stored Cross-Site Scripting via the icon shortcode due to insufficient input sanitization and output escaping on user-supplie...
PT-2023-5781 · Acronis · Acronis Cyber Protect 15 +1
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions before build 35979 Description: The issue is related to sensitive information disclosure due to spell-jacking, which may allow an attacker to gain unauthorized access to protected information. The vulnerabili...
WordPress plugin Restrict - membership, site, content and user access restrictions for WordPress cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Restrict - membership, sit...
PT-2023-23673 · Red Hat · Openshift Container Platform For Ibm Linuxone +4
Name of the Vulnerable Software and Affected Versions: undertow affected versions not specified jboss enterprise application platform affected versions not specified jboss enterprise application platform text-only advisories affected versions not specified openshift container platform affected...
CVE-2023-41861 WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Restrict plugin = 2.2.4 versions...
CVE-2023-41861
CVE-2023-41861 affects the WordPress plugin Restrict (
PT-2023-29080 · Unknown · Blackcat Cms
Name of the Vulnerable Software and Affected Versions: Black Cat CMS version 1.4.1 Description: A cross-site scripting XSS vulnerability exists in Black Cat CMS, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. This issue is present in two locations: the...
PT-2023-6822 · Glpi +2 · Glpi +2
Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.10 Description: The issue is related to information disclosure in the GLPI system. Exploitation of this issue may allow a remote attacker to disclose protected information. An API user can enumerate sensitive field...
PT-2023-6846 · Glpi +2 · Glpi +2
Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.10 Description: The issue is related to the lack of path filtering on the GLPI URL, which may allow an attacker to transmit a malicious URL of the login page to attempt a phishing attack on user credentials. This c...
PT-2023-6848 · Glpi +2 · Glpi +2
Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.10 Description: The issue is related to an unlimited file upload vulnerability in the GLPI system, which can be exploited by a remote attacker to upload arbitrary files to the system. This can potentially allow the...
PT-2023-28127
Name of the Vulnerable Software and Affected Versions Restrict plugin versions = 2.2.4 Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or tak...
