4753 matches found
CVE-2025-31808
Cross-Site Request Forgery CSRF vulnerability in IT Path Solutions SCSS WP Editor scss-wp-editor allows Cross Site Request Forgery.This issue affects SCSS WP Editor: from n/a through = 1.2.1...
CVE-2025-31808
Technical details for CVE-2025-31808 are not publicly available in the provided documents. No affected product/version, impact, exploit info, or fix is disclosed here. Monitor for updates.
CVE-2025-31808 WordPress SCSS WP Editor Plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in IT Path Solutions SCSS WP Editor allows Cross Site Request Forgery. This issue affects SCSS WP Editor: from n/a through 1.1.8...
CVE-2025-31808 WordPress SCSS WP Editor plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in IT Path Solutions SCSS WP Editor scss-wp-editor allows Cross Site Request Forgery.This issue affects SCSS WP Editor: from n/a through = 1.2.1...
CVE-2025-30910
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CreativeMindsSolutions CM Download Manager cm-download-manager allows Path Traversal.This issue affects CM Download Manager: from n/a through = 2.9.6...
CVE-2025-30910
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CreativeMindsSolutions CM Download Manager cm-download-manager allows Path Traversal.This issue affects CM Download Manager: from n/a through = 2.9.6...
PT-2025-14432 · Wisdomlogix Solutions Pvt. · Fonts Manager | Custom Fonts
Name of the Vulnerable Software and Affected Versions: Wisdomlogix Solutions Pvt. Ltd. Fonts Manager | Custom Fonts versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...
CVE-2025-3022
Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint...
CVE-2025-3021
Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...
CVE-2025-3022
CVE-2025-3022 concerns an OS command injection in E-Solutions E-Management. Multiple sources confirm the vulnerability is triggered via the client parameter to /data/apache/e-management/api/api3.php, allowing an attacker to execute arbitrary commands on the server. The CVE is rated critical (CVSS...
CVE-2025-3022 OS Command Injection vulnerability in e-management of e-solutions
Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint...
CVE-2025-3021 Path Traversal vulnerability in e-management of e-solutions
Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...
E-Solutions E-Management 操作系统命令注入漏洞
E-Solutions E-Management is an application from E-Solutions, Inc. An operating system command injection vulnerability exists in E-Solutions E-Management, which stems from the presence of command injection that could lead to the execution of arbitrary commands on the server...
E-Solutions E-Management 路径遍历漏洞
E-Solutions E-Management is an application from E-Solutions, Inc. A path traversal vulnerability exists in E-Solutions E-Management that originates from path traversal and could result in access to confidential files outside of the expected scope...
CVE-2025-31471
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Falcon Solutions Duplicate Page and Post duplicate-post-and-page allows Stored XSS.This issue affects Duplicate Page and Post: from n/a through = 1.0...
CVE-2025-31466
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Falcon Solutions Duplicate Page and Post duplicate-post-and-page allows Blind SQL Injection.This issue affects Duplicate Page and Post: from n/a through = 1.0...
CVE-2025-31471
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Falcon Solutions Duplicate Page and Post duplicate-post-and-page allows Stored XSS.This issue affects Duplicate Page and Post: from n/a through = 1.0...
CVE-2025-31466
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Falcon Solutions Duplicate Page and Post duplicate-post-and-page allows Blind SQL Injection.This issue affects Duplicate Page and Post: from n/a through = 1.0...
CVE-2025-31466 WordPress Duplicate Page and Post plugin <= 1.0 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Falcon Solutions Duplicate Page and Post duplicate-post-and-page allows Blind SQL Injection.This issue affects Duplicate Page and Post: from n/a through = 1.0...