CVE-2023-5817

The Neon text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's neontextbox shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes color. This makes it possible for authenticated...

WordPress Neon text Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Neon text Type Plugin Vulnerable versions = 1.1 Fixed in 1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5817 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3b1607d0a011 Credits Dmitrii Ignatyev Required privileg...

CVE-2023-45379

In the module "Rotator Img" posrotatorimg in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection...

PT-2023-29489 · Unknown · Turna Advertising Administration Panel

Name of the Vulnerable Software and Affected Versions: Turna Advertising Administration Panel versions prior to 1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2023-43268

Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability...

PT-2023-28750 · Deyue · Deyue Remote Vehicle Management System

Name of the Vulnerable Software and Affected Versions: Deyue Remote Vehicle Management System version 1.1 Description: A deserialization vulnerability was discovered in the system. Recommendations: For Deyue Remote Vehicle Management System version 1.1, at the moment, there is no information abou...

PowerShield SNMP Web Pro Security Vulnerability

PowerShield SNMP Web Pro is a PowerShield for monitoring and managing multiple UPSs in a networked environment. A security vulnerability exists in PowerShield SNMP Web Pro version v.1.1 that originated from a vulnerability that allows a remote attacker to execute arbitrary code and obtain sensiti...

PT-2023-27989 · Unknown · Dairy Farm Shop Management System Using Php/Mysql

Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System Using PHP and MySQL version 1.1 Description: The Dairy Farm Shop Management System Using PHP and MySQL contains multiple SQL injection vulnerabilities in the Login function. These vulnerabilities are exploite...

Jenkins Plugin Frugal Testing Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

CVE-2023-24009

Auth. subscriber+ Reflected Cross-site Scripting XSS vulnerability in Wpazure Themes Upfrontwp theme = 1.1 versions...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 1.1...

CVE-2023-35043

Unauth. Stored Cross-Site Scripting XSS vulnerability in Neha Goel Recent Posts Slider plugin = 1.1 versions...

BloodBank 跨站脚本漏洞

BloodBank is a responsive blood bank and donor content management system CMS. A cross-site scripting vulnerability exists in BloodBank version 1.1, which stems from a lack of effective filtering and escaping of user-supplied data in the file page.php, and can be exploited by an attacker to execut...

SUSE CVE-2023-37788

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors...

CVE-2023-37788

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors...

DEBIAN-CVE-2023-37788

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors...

Design/Logic Flaw

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors...

goproxy 资源管理错误漏洞

goproxy is an HTTP proxy library for Go. A security vulnerability exists in goproxy v1.1, which can be exploited by an attacker to cause a denial of service DoS via an unspecified vector...

CVE-2023-3167

The Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha...

PT-2023-23410 · WordPress · Email Queue

Name of the Vulnerable Software and Affected Versions: Mail Queue plugin for WordPress versions up to, and including, 1.1 Description: The issue arises from insufficient input sanitization and output escaping, allowing Stored Cross-Site Scripting attacks. This enables unauthenticated attackers to...