CVE-2024-40510

CVE-2024-40510 openPetra v.2023.02의 서버MCommon.asmx 함수를 통한 사이트 간 스크립팅 취약점 설명 : 인증되지 않은 사용자가 openPetra v.2023.02의 serverMCommon.asmx 함수를 통한 XSS를 악용하여 인증된 사용자의 쿠키를 탈취할 수 있습니다. 취약한 제품 버전 : openPetra v.2023.02 CVE 작성자 : Jansen Moreira 날짜 : 2024-07-13 CVE : CVE-2024-40510 CVE 링크 :...

CVE-2026-9290

CVE-2026-9290 — WP User Manager LFI to RCE 익스플로잇 'tab' 매개변수를 통한 인증 전 경로 탐색 → 로컬 파일 포함 개요 CVE-2026-9290 는 WP User Manager – User Profile Builder & Membership WordPress 플러그인 ≤ 2.9.17에서 발견된 높은 심각도CVSS 7.5의 인증되지 않은 로컬 파일 포함 취약점입니다. wpumgetactiveprofiletab 함수는 tab 쿼리 매개변수를 화이트리스트 검증 없이 Gamajo 템플릿 로더에 ...

CVE-2024-40507

CVE-2024-40507 openPetra v.2023.02의 serverMPersonnel.asmx 함수에서 발생하는 XSSCross Site Scripting 취약점 설명 : 인증되지 않은 사용자가 openPetra v.2023.02의 serverMPersonnel.asmx 함수의 XSS를 악용하여 인증된 사용자의 쿠키를 탈취할 수 있습니다. 취약한 제품 버전 : openPetra v.2023.02 CVE 작성자 : Jansen Moreira 날짜 : 2024-07-13 CVE : CVE-2024-40507 CVE 링크 ...

CVE-2024-2242

CVE-2024-2242 Contact Form 7 history.pushState'', '', '/'; document.forms0.submit;...

CVE-2024-40508

CVE-2024-40508 openPetra v.2023.02의 serverMConference.asmx 기능을 통한 사이트 간 스크립팅XSS 취약점 설명 : 인증되지 않은 사용자가 openPetra v.2023.02의 serverMConference.asmx 기능에서 XSS를 악용하여 인증된 사용자의 쿠키를 탈취할 수 있습니다. 취약한 제품 버전 : openPetra v.2023.02 CVE 작성자 : Jansen Moreira 날짜 : 13/07/2024 CVE : CVE-2024-40508 CVE 링크 :...

DEBIAN-CVE-2026-39900

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-39900

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-39900 Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

EUVD-2026-39135

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-39900 Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-39900

Cacti versions 1.2.30 and earlier are vulnerable to a Reflected XSS via the tab parameter in the auth_profile.php JavaScript context. The issue is fixed in version 1.2.31. CVSS 4.0 base score 5.3 (Medium) with network vector, low attack complexity, no privileges required, and user interaction req...

CVE-2026-39900 Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-39900

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-39900

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-39900: Improper Neutralization of Input During Web Page Generation

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

PT-2026-52135

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.31 Description Reflected Cross-Site Scripting XSS occurs in the JavaScript context of the 'auth profile.php' endpoint through the tab parameter. Reflected XSS is a type of attack where a malicious script is reflecte...

CVE-2026-12137

The SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 4.3.6 due to insufficient input sanitization and output escaping. Thi...

CVE-2026-12137 SysBasics Customize My Account for WooCommerce <= 4.3.6 - Reflected Cross-Site Scripting via 'tab' Parameter

The SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 4.3.6 due to insufficient input sanitization and output escaping. Thi...

CVE-2026-12137 SysBasics Customize My Account for WooCommerce <= 4.3.6 - Reflected Cross-Site Scripting via 'tab' Parameter

The SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 4.3.6 due to insufficient input sanitization and output escaping. Thi...

CVE-2026-12137

The CVE concerns the WordPress plugin SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager. It is vulnerable to a Reflected Cross-Site Scripting (XSS) via the tab parameter in all versions up to and including 4.3.6, caused by insufficient input sanitization...