26 matches found
EUVD-2026-66174
A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...
CVE-2026-38467
A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...
CVE-2026-38467
A SQL injection vulnerability exists in the tags manager of GazellePW (GazellePosterWall) , specifically in commit 86c4bedf727691b5a97af42a4864869d18446449 . This flaw allows remote authenticated users with users_mod privileges to execute arbitrary SQL commands by sending a crafted POST request t...
CVE-2026-38467
A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...
PT-2026-81854
Name of the Vulnerable Software and Affected Versions GazellePW GazellePosterWall versions prior to commit 86c4bedf727691b5a97af42a4864869d18446449 Description A SQL injection issue exists in the tags manager. Remote authenticated users with users mod privileges can execute arbitrary SQL commands...
CVE-2026-38467: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...
CVE-2026-38467
A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...
CVE-2026-38467
A SQL injection vulnerability in the tags manager in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersmod privileges to execute arbitrary SQL commands via the tagid or type parameter in a crafted POST request to...
EUVD-2023-38148
Malicious code in bioql PyPI...
CVE-2023-34024
Cross-Site Request Forgery CSRF vulnerability in Guillemant David WP Full Auto Tags Manager plugin = 2.2 versions...
CVE-2025-31460
Cross-Site Request Forgery CSRF vulnerability in danielmuldernl OmniLeads Scripts and Tags Manager omnileads-scripts-and-tags-manager allows Stored XSS.This issue affects OmniLeads Scripts and Tags Manager: from n/a through = 1.3...
WordPress OmniLeads Scripts and Tags Manager plugin <= 1.3 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin OmniLeads Scripts and Tags Manager versions = 1.3...
CVE-2025-31460
Cross-Site Request Forgery CSRF vulnerability in danielmuldernl OmniLeads Scripts and Tags Manager omnileads-scripts-and-tags-manager allows Stored XSS.This issue affects OmniLeads Scripts and Tags Manager: from n/a through = 1.3...
CVE-2025-31460 WordPress OmniLeads Scripts and Tags Manager plugin <= 1.3 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in danielmuldernl OmniLeads Scripts and Tags Manager allows Stored XSS. This issue affects OmniLeads Scripts and Tags Manager: from n/a through 1.3...
CVE-2025-31460
CVE-2025-31460 : A CSRF vulnerability in OmniLeads Scripts and Tags Manager (WordPress) enables Stored XSS. Affected: OmniLeads Scripts and Tags Manager versions up to 1.3. Root cause/impact: CSRF allows stored XSS in the attacker-controlled context; CVSS v3.1 metrics show AV:N, AC:L, PR:N, UI:R,...
WordPress plugin OmniLeads Scripts and Tags Manager 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
CVE-2025-31460: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in danielmuldernl OmniLeads Scripts and Tags Manager omnileads-scripts-and-tags-manager allows Stored XSS.This issue affects OmniLeads Scripts and Tags Manager: from n/a through = 1.3...
PT-2025-13498
Name of the Vulnerable Software and Affected Versions danielmuldernl OmniLeads Scripts and Tags Manager versions 1.3 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can execute malicious scripts on the victim's...
