CVE-2024-4731

A vulnerability classified as problematic was found in Campcodes Legal Case Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/role. The manipulation of the argument slug leads to cross site scripting. The attack can be launched remotely. The...

Ecommerce 跨站脚本漏洞

Ecommerce is a website builder from the phpscriptpoint team. A cross-site scripting vulnerability exists in Ecommerce version 1.15, which stems from a cross-site scripting XSS vulnerability in the slug parameter of blog-single.php...

PT-2023-26511 · Unknown · Phpscriptpoint Ecommerce

Name of the Vulnerable Software and Affected Versions: phpscriptpoint Ecommerce version 1.15 Description: A problematic issue has been found in the software, affecting some unknown functionality of the file /blog-single.php. The manipulation of the slug argument leads to cross-site scripting. The...

Bolt Cross-site Scripting via the slug, teaser or title parameters

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933...

CVE-2020-8641

Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php pageslug parameter...

CVE-2018-15842

WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter...

CVE-2018-6576

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192...

Cross site scripting

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

CVE-2011-5192

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...