44 matches found
Woocommerce Vietnam Checkout < 2.0.5 - Reflected XSS
The plugin does not sanitise and escape the from and to parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
com.liferay:com.liferay.users.admin.demo (>=1.0.5 <=1.0.6) potentially affected by CVE-2022-26596 via com.liferay:com.liferay.journal.content.web (>=1.0.0 <=2.0.0)
com.liferay:com.liferay.journal.content.web MAVEN version =1.0.0, =1.0.5, =1.0.6 Source cves: CVE-2022-26596 Source advisory: OSV:GHSA-W7F2-6896-6MM2...
Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Put the following payload in the "Name of list" field in the User Lists Overview ...
