3 matches found
CVE-2024-31263
CVE-2024-31263 is a CSRF vulnerability in the WordPress plugin Loan Repayment Calculator and Application Form (aka quick-interest-slider), affecting versions up to 2.9.4. The connected documents provide the vulnerability and affected version but do not specify exploit details, affected environmen...
CVE-2021-44299
A reflected cross-site scripting XSS vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload...
Real Estate 7 < 2.9.5 - Multiple Vulnerabilities
Multiple vulnerabilities was discovered in the 'Real Estate 7 WordPress', tested version — v2.9.4: - Unauthenticated Reflected XSS - Authenticated Persistent XSS - Authenticated Persistent Self-XSS - IDOR - Information Exposure Edit WPScanTeam: January 12th - Report Received & Envato Contacted...