534 matches found
PT-2024-26483 · Webid · Webid
Name of the Vulnerable Software and Affected Versions: WeBid version 1.1.2 Description: The issue is related to SQL Injection via the admin/tax.php endpoint. This allows for potential unauthorized access to database information. Recommendations: For WeBid version 1.1.2, as a temporary workaround,...
WeBid 安全漏洞
WeBid is an open source auction website building solution. A security vulnerability exists in WeBid version 1.1.2, which originates from a SQL injection vulnerability in the file admin/tax.php...
CVE-2024-34256
OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...
CVE-2024-34256
OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...
PT-2024-25773 · Ofcms · Ofcms
Name of the Vulnerable Software and Affected Versions: OFCMS version 1.1.2 Description: The issue allows for SQL Injection via the new table function. Recommendations: For OFCMS version 1.1.2, update to a version that fixes this issue, however at the moment, there is no information about a newer...
OFCMS 安全漏洞
Zhongtian Network Technology OFCMS is a content management system CMS developed in Java language by China Zhongtian Network Technology Company. A security vulnerability exists in OFCMS version V1.1.2, which originates from an easy SQL injection attack via a new table function...
WordPress Fast Custom Social Share by CodeBard plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Fast Custom Social Share by CodeBard versions = 1.1.2...
WordPress RomethemeForm For Elementor plugin <= 1.1.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin RomethemeForm For Elementor versions = 1.1.2...
CVE-2024-31429
Cross-Site Request Forgery CSRF vulnerability in Blossom Themes Sarada Lite.This issue affects Sarada Lite: from n/a through 1.1.2...
CVE-2024-31429
Technical details about CVE-2024-31429 are not provided in the supplied documents. Public information is limited to a basic description; monitor for updates from vendors and security advisories.
WordPress Sarada Lite theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Sarada Lite versions = 1.1.2...
CVE-2024-2305
The Cards for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the BootstrapCard link in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2024-23733 · Huashi · Huashi Private Cloud Cdn Live Streaming Acceleration Server
Name of the Vulnerable Software and Affected Versions: Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport version 1.1.2 Description: An issue in the Huashi Private Cloud CDN Live Streaming Acceleration Server allows a remote attacker to execute arbitrary code via the...
WordPress Cards for Beaver Builder Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
Software Cards for Beaver Builder Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2305 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f2cce6bd9382 Credits Francesco...
PT-2024-22763 · Cozmoslabs · Cozmoslabs Passwordless Login
Name of the Vulnerable Software and Affected Versions: Cozmoslabs Passwordless Login versions 1.1.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...
CVE-2024-1687
The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to a missing capability check on the gettexteditorcontent function in all versions up to, and including, 1.1.2. This makes it possible for authenticat...
CVE-2024-25904
Cross-Site Request Forgery CSRF vulnerability in David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and Styles.This issue affects TinyMCE and TinyMCE Advanced Professsional Formats and Styles: from n/a through 1.1.2...
PT-2024-15222 · WordPress · Meris
Name of the Vulnerable Software and Affected Versions: Meris WordPress theme versions 1.1.2 and earlier Description: The issue is related to Reflected Cross-Site Scripting, which occurs because the theme does not properly sanitise and escape certain parameters before outputting them back in the...
Meris <= 1.1.2 - Reflected XSS
Description The theme does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC...