CVE-2022-0410

The WP Visitor Statistics Real Time Traffic WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection...

acronymsmeanings.com XSS vulnerability

Vulnerable URL: http://acronymsmeanings.com/search.php?q=' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 80582 VIP website status:| No Check acronymsmeanings.com SSL connection:|...

shofer.co.il XSS vulnerability

Vulnerable URL: http://www.shofer.co.il/site/detail/departAlbum/albumPic.asp?departid=230814id=121641="--!"=1=2=3=3=0=IFwinEditGadget1216417921=0=000000=1=4= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Public...