15935 matches found
CVE-2023-47528
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...
CVE-2023-47528
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...
CVE-2023-46581
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...
CVE-2023-47528 WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...
CVE-2023-47528
CVE-2023-47528 concerns the WP Edit Username WordPress plugin (
CVE-2023-47528 WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...
PHPGrukul-Pre-School-Enrollment-System-v1.0
PHPGrukul-Pre-School-Enrollment-System-v1.0 I wanted to touch...
CVE-2023-43901
Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user...
CVE-2023-43901
Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user...
WordPress Plugin WP Edit Username Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2023-47528: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...
PT-2023-30487
Name of the Vulnerable Software and Affected Versions Sajjad Hossain Sagor WP Edit Username plugin versions 1.0.5 and earlier Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations For Sajja...
PT-2023-30451
Name of the Vulnerable Software and Affected Versions Pre-School Enrollment version 1.0 Description The issue allows for SQL Injection via the username parameter in the "preschool/admin/" page. This could potentially lead to unauthorized access or manipulation of data. Recommendations For...
EnBw SENEC Legacy Storage Box Information Disclosure
Advisory ID: Ph0s-2023-002 Product: EnBw - SENEC legacy storage box: V1-V3 Manufacturer: SENEC - a part of EnBw Affected Versions: Firmware: all as of 2023-06-19 Tested Versions: current Vulnerability Type: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Risk Level: CVSS v3.1...
PT-2023-8977 · Grafana +3 · Grafana +3
Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: The issue is related to a weakness in the authentication mechanism of Grafana, specifically with the verify email enabled option. This option only validates email addresses during the sign-...
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
UBUNTU-CVE-2023-5545
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545
CVE-2023-5545: The vulnerability is an information disclosure where H5P metadata auto-populates the author field with the user’s username, potentially exposing sensitive information. Public sources in OSV and GHSA confirm this leakage across Moodle/H5P contexts. The provided materials do not spec...
