30 matches found
CVE-2024-50491
CVE-2024-50491 RSVP ME = 1.9.9 - 未認証SQLインジェクション 説明 WordPress 用プラグイン RSVP ME には、バージョン 1.9.9 以前(1.9.9 を含む)において、ユーザー指定パラメータのエスケープ処理が不十分で、既存の SQL クエリの準備が不十分なことに起因する SQL インジェクションの脆弱性が存在します。これにより、認証されていない攻撃者が既存のクエリに追加の SQL クエリを埋め込み、データベースから機密情報を抽出するために悪用される可能性があります。 詳細 タイプ : プラグイン スラッグ : rsvp-me...
CVE-2025-23480
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MicahBlu RSVP ME rsvp-me allows Stored XSS.This issue affects RSVP ME: from n/a through = 1.9.9...
EUVD-2024-44946
Malicious code in bioql PyPI...
EUVD-2025-5739
Malicious code in bioql PyPI...
CVE-2025-23480
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MicahBlu RSVP ME rsvp-me allows Stored XSS.This issue affects RSVP ME: from n/a through = 1.9.9...
CVE-2025-23480 WordPress RSVP ME plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MicahBlu RSVP ME rsvp-me allows Stored XSS.This issue affects RSVP ME: from n/a through = 1.9.9...
CVE-2025-23480
The CVE-2025-23480 issue concerns the WordPress RSVP ME plugin (versions up to and including 1.9.9). The vulnerability is an improper neutralization of input during web page generation, enabling Stored Cross-Site Scripting (XSS). Affected component is the RSVP ME plugin’s input handling, with att...
CVE-2025-23480 WordPress RSVP ME plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MicahBlu RSVP ME rsvp-me allows Stored XSS.This issue affects RSVP ME: from n/a through = 1.9.9...
CVE-2025-23480: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MicahBlu RSVP ME rsvp-me allows Stored XSS.This issue affects RSVP ME: from n/a through = 1.9.9...
WordPress plugin NotFound RSVP ME 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
CVE-2024-50491
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...
CVE-2024-50544
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...
WordPress RSVP ME plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin RSVP ME versions = 1.9.9...
Exploit for SQL Injection in Micahblu Rsvp_Me
CVE-2024-50491 RSVP ME = 5.0.12 AND time-based blind query SL...
CVE-2024-50544
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...
CVE-2024-50544 WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...
CVE-2024-50544
CVE-2024-50544 : WordPress RSVP ME plugin
CVE-2024-50544 WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...
CVE-2024-50544: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...
PT-2024-34322 · Micah Blu · Micah Blu Rsvp Me
Name of the Vulnerable Software and Affected Versions: Micah Blu RSVP ME versions 1.9.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper handling of special elements in an SQL command. This allows for SQL Injection attacks. Recommendations: For Micah...