WordPress Plugin Simple Wp Sitemap Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Simple Image Stack Website Cross-Site Scripting Vulnerability

Simple Image Stack Website is a simple image display website. A cross-site scripting vulnerability exists in SourceCodester Simple Image Stack Website version 1.0, which stems from the parameter search that causes cross-site scripting...

Stupid Simple CMS Code Issue Vulnerability

Stupid Simple CMS is a content management system by codelyfe individual developer. A code issue vulnerability exists in Stupid Simple CMS 1.2.4 and earlier versions, which stems from an arbitrary file upload vulnerability in file/file manager/upload.php...

CVE-2023-49179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in N.O.U.S. Open Useful and Simple Event post allows Stored XSS.This issue affects Event post: from n/a through 5.8.6...

CVE-2023-49179

CVE-2023-49179 affects the WordPress plugin Event post (N.O.U.S. Open Useful and Simple Event post). The issue is an improper neutralization during web page generation that allows Stored XSS in Event posts, affecting versions up to 5.8.6. Impact is a stored cross-site scripting vulnerability (req...

CVE-2023-49151

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simple Calendar Simple Calendar – Google Calendar Plugin allows Stored XSS.This issue affects Simple Calendar – Google Calendar Plugin: from n/a through 3.2.6...

CVE-2023-49151

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simple Calendar Simple Calendar – Google Calendar Plugin allows Stored XSS.This issue affects Simple Calendar – Google Calendar Plugin: from n/a through 3.2.6...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simple Calendar Simple Calendar – Google Calendar Plugin allows Stored XSS.This issue affects Simple Calendar – Google Calendar Plugin: from n/a through 3.2.6...

CVE-2023-49151

Summary: CVE-2023-49151 affects the WordPress plugin Google Calendar Events (aka Simple Calendar – Google Calendar Plugin), with affected versions up to 3.2.6. The vulnerability is a stored XSS caused by improper neutralization of input during web page generation. The issue supports a network att...

CVE-2023-49841

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress allows Stored XSS.This issue affects Optin Forms – Simple List Building Plugin for WordPress: from n/a through 1.3.3...

PT-2023-31071 · Unknown · Simple Calendar – Google Calendar Plugin

Name of the Vulnerable Software and Affected Versions: Simple Calendar – Google Calendar Plugin versions through 3.2.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS. Recommendations:...

The vulnerability of the SNMPv2 protocol implementation in ASUS’ ASMB8 iKVM remote control device allows a hacker to execute arbitrary commands.

The vulnerability of the SNMPv2 protocol implementation in ASUS’ ASMB8 iKVM remote control device is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

WordPress plugin and WordPress cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2023-6771

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function saveattendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to th...

CVE-2023-6771

CVE-2023-6771 affects SourceCodester Simple Student Attendance System 1.0 in the actions.class.php, save_attendance function. The sid parameter is vulnerable to SQL injection, enabling an attacker to manipulate queries. Public exploitation information exists. Affected component: save_attendance (...

CVE-2023-6658 SourceCodester Simple Student Attendance System sql injection

A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerability affects unknown code of the file ajax-api.php?action=saveattendance. The manipulation of the argument classid leads to sql injection. The exploit has been disclosed to the...

CVE-2023-6657

A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file /modals/studentform.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-6650

A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated remotely. The exploi...

CVE-2023-6650

CVE-2023-6650 affects SourceCodester Simple Invoice Generator System 1.0. The vulnerability is a cross-site scripting flaw in the login.php handling of the cashier parameter. The issue allows an attacker to inject scripts that may be executed in the context of the victim’s browser. Remote initiat...

SourceCodester Simple Student Attendance System SQL Injection Vulnerability

Simple Student Attendance System is a simple student attendance system. SourceCodester Simple Student Attendance System version 1.0 suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in the file ajax-api.php...