6001 matches found
ftcms 代码注入漏洞
ftcms is a content management system from ftcms Inc. A code injection vulnerability exists in version 2.1 of ftcms, which stems from an incorrect manipulation of the parameter title that could lead to a cross-site scripting attack...
JoomlaUX JUX Real Estate 注入漏洞
JoomlaUX JUX Real Estate is a Joomla component from JoomlaUX designed to meet a variety of real estate related needs. An injection vulnerability exists in JoomlaUX JUX Real Estate version 3.4.0, which stems from the fact that incorrect manipulation of the parameter title can lead to SQL injection...
WordPress FooGallery plugin <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size vulnerability
Authenticated Custom+ Stored Cross-Site Scripting via Album Title Size vulnerability discovered by Stiofan in WordPress Plugin FooGallery versions = 2.4.29...
MD5 Hash Collision Causes Overwriting of Papers with the Same Title, Leading to Data Loss
Description The ArxivReader class in LlamaIndex is responsible for searching for papers on ArXiv, downloading them, and processing them for AI model training. The workflow of ArxivReader is as follows: 1. The user searches for a specific topic on ArXiv, retrieving a list of relevant papers. impor...
CVE-2024-12611
The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 93.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...
CVE-2025-1875
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php...
CVE-2025-1875
The CVE-2025-1875 entry documents an SQL injection in 101news version 1.0, exploitable via the searchtitle parameter in search.php. The vulnerability is described across multiple sources and indicates a critical impact, but the provided materials do not specify an exploit method, affected platfor...
Cross-site Scripting (XSS)
Overview getformwork/formwork is an a file-based Content Management System CMS to make and manage simple sites. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the title field in the panel/options/site page. An attacker can exploit this vulnerability by embedding...
Formwork has a cross-site scripting (XSS) vulnerability in Site title
Summary The site title field at /panel/options/site/allows embedding JS tags, which can be used to attack all members of the system. This is a widespread attack and can cause significant damage if there is a considerable number of users. Impact The attack is widespread, leveraging what XSS can do...
GHSA-VF6X-59HH-332F Formwork has a cross-site scripting (XSS) vulnerability in Site title
Summary The site title field at /panel/options/site/allows embedding JS tags, which can be used to attack all members of the system. This is a widespread attack and can cause significant damage if there is a considerable number of users. Impact The attack is widespread, leveraging what XSS can do...
PT-2025-9201 · Formwork · Formwork
Name of the Vulnerable Software and Affected Versions: Formwork versions 2.x Description: The site title field at "/panel/options/site" allows embedding JS tags, which can be used to attack all members of the system. This is a widespread attack and can cause significant damage if there is a...
WordPress BuddyBoss Platform plugin <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title' vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting via 'linktitle' vulnerability discovered by mikemyers in WordPress Plugin Buddyboss Platform versions = 2.7.70...
WordPress plugin Buddyboss Platform 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-8936 · WordPress · Buddyboss Platform
Name of the Vulnerable Software and Affected Versions: The Buddyboss Platform plugin for WordPress versions up to and including 2.7.70 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, specifically via the link title...
CVE-2024-13748
The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title parameter in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
Leantime allows Cross-Site Scripting (XSS)
Summary There is a cross-site scripting vulnerability on To-Do that affects a title field of a To-Do...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the title field of a To-Do component. An attacker can inject malicious scripts by submitting crafted input to this field. Details Cross-site scripting or XSS is a code vulnerability that occurs when an...
PT-2025-7645 · To-Do · To-Do
Name of the Vulnerable Software and Affected Versions: To-Do affected versions not specified Description: The issue is related to a cross-site scripting vulnerability that affects the title field of a To-Do. Recommendations: At the moment, there is no information about a newer version that contai...