6 matches found
CVE-2025-68004
CVE-2025-68004 is a Reflected XSS in WordPress plugin My Post Order (my-posts-order) up to version 1.2.1.1, caused by improper input neutralization during web page generation. The CVSS 3.1 vector indicates NETWORK attack with USER INTERACTION required and HIGH severity (7.1). Multiple connected s...
CVE-2025-68004 WordPress My Post Order plugin <= 1.2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kapil Chugh My Post Order my-posts-order allows Reflected XSS.This issue affects My Post Order: from n/a through = 1.2.1.1...
PT-2026-4049
Name of the Vulnerable Software and Affected Versions Kapil Chugh My Post Order versions through 1.2.1.1 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS issue. This specific instance is a Reflected...
WordPress My Post Order plugin <= 1.2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin My Post Order versions = 1.2.1.1...
phpldapadmin 1.2.1.1 lib-functions.php 代码执行漏洞
No description provided by source...
phpLDAPadmin 1.2.1.1 Remote PHP Code Injection
$key \n"; 1018. $code .= " asort$a-$key;\n"; 1019. $code .= " $aa = arrayshift$a-$key;\n";...