678 matches found
PT-2023-15119 · Sonic · Sonic
Name of the Vulnerable Software and Affected Versions: Sonic version 1.0.4 Description: The issue allows attackers to execute a directory traversal in the component /admin/backups/work-dir. This enables attackers to access files or directories outside the intended directory structure...
Sonic 路径遍历漏洞
Sonic is a high-performance blogging system from go developed using golang. A security vulnerability exists in Sonic v1.0.4, which stems from the component /admin/backups/work-dir that allows an attacker to perform directory traversal...
CVE-2023-0162
The CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type settings parameters in versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
Cross site scripting
A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function taxonomyswitcherinit of the file taxonomy-switcher.php. The manipulation leads to cross site scripting. It is possible to launch the attack...
Taxonomy Switcher 跨站脚本漏洞
Taxonomy Switcher is a taxonomy that switches terms by a specific parent of another taxonomy. A cross-site scripting vulnerability exists in Taxonomy Switcher versions prior to 1.0.4, which stems from a problem with the function taxonomyswitcherinit in the file taxonomy-switcher.php, which can le...
WordPress plugin WP AutoComplete Search SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
PT-2023-14165 · WordPress · Wp Autocomplete Search
Name of the Vulnerable Software and Affected Versions: WP AutoComplete Search WordPress plugin versions 1.0.4 and earlier Description: The issue arises from the plugin's failure to sanitise and escape a parameter before using it in a SQL statement via an AJAX endpoint available to unauthenticated...
replicator 代码问题漏洞
replicator is an advanced JavaScript object serialization library by the individual developer Ivan Nikulin. A security vulnerability exists in replicator versions prior to 1.0.4. An attacker could exploit this vulnerability to execute arbitrary code via the fromSerializable function in a TypedArr...
PT-2022-23179 · WordPress · Getyourguide Ticketing Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: GetYourGuide Ticketing WordPress plugin versions prior to 1.0.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for...
WordPress plugin GetYourGuide Ticketing 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2022-27254 · WordPress · Agenteasy Properties
Name of the Vulnerable Software and Affected Versions: AgentEasy Properties plugin versions 1.0.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. It affects the AgentEasy Properties plugin on...
Bytebase Access Control Error Vulnerability
Bytebase is an open source web-based, zero-configuration, dependency-free database schema change and version control management tool for DevOps teams.Bytebase versions 0.1.0 through 1.0.4 are vulnerable to an access control error that stems from unrestricted low privilege user access, which can b...
CVE-2022-39240 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph
MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround...
CVE-2022-39240 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph
MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround...
CVE-2022-39240 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph
MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround...
WordPress plugin WP Taxonomy Import 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Integration for Billingo & Gravity Forms plugin <= 1.0.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by Lana Code in the WordPress Integration for Billingo & Gravity Forms plugin versions = 1.0.3. Solution Update the WordPress Integration for Billingo & Gravity Forms plugin to the latest available version at least 1.0.4...
CVE-2022-38249
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the MTR component in version 1.0.4...
