CVE-2023-5806

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mergen Software Quality Management System allows SQL Injection.This issue affects Quality Management System: before v1.2...

Mergen Software Quality Management System SQL Injection Vulnerability

Mergen Software Quality Management System is a quality management system from the Turkish company Mergen. A SQL injection vulnerability exists in Mergen Software Quality Management System v1.2 and earlier, which is caused by improper neutralization of special elements...

WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection

Software Bravo Translate Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-49161 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 9e3d902f085a Credits Arvandy Required privilege Administrator Published 28...

PT-2023-23847 · Unknown · Himanshu Parashar Google Site Verification Plugin Using Meta Tag

Name of the Vulnerable Software and Affected Versions: Himanshu Parashar Google Site Verification plugin using Meta Tag versions 1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-21705 · Stranger Studios · Stranger Studios Force First/Last Name As Display Name Plugin

Name of the Vulnerable Software and Affected Versions: Stranger Studios Force First and Last Name as Display Name plugin versions 1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user int...

WordPress Neon text Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Neon text Type Plugin Vulnerable versions = 1.1 Fixed in 1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5817 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3b1607d0a011 Credits Dmitrii Ignatyev Required privileg...

PT-2023-32056 · WordPress · Form For All

Name of the Vulnerable Software and Affected Versions: Contact form Form For All plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Stored Cross-Site Scripting via the 'formforall' shortcode due to insufficient input sanitization and output escaping on...

PT-2023-28074 · Unknown · Nigauri Insert Estimated Reading Time

Name of the Vulnerable Software and Affected Versions: nigauri Insert Estimated Reading Time plugin versions 1.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For nigauri Inser...

WordPress Outbound Link Manager Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Outbound Link Manager Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41850 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c95f0f1dc27b Credits Rio Darmawan...

Roundcube Password Recovery plugin security vulnerability

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. A security vulnerability exists in the Roundcube Password Recovery plugin version 1.2, which stems from a user enumeration vulnerability that could allo...

Roundcube Password Recovery plugin Authorization Issues Vulnerability

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. A security vulnerability exists in the Roundcube Password Recovery plugin version 1.2, which stems from a flaw in the password recovery mechanism that...

CVE-2023-28783

Auth. shop manager+ Stored Cross-Site Scripting XSS vulnerability in PHPRADAR Woocommerce Tip/Donation plugin = 1.2 versions...

WordPress Brain Power Theme <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Brain Power Type Theme Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2813 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1eb52f5b8792 Credits Random Robbie Required...

PT-2023-24264 · WordPress · Custom Field For Wp Job Manager

Name of the Vulnerable Software and Affected Versions: The Custom Field For WP Job Manager WordPress plugin versions prior to 1.2 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is...

WordPress plugin Custom Field For WP Job Manager Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

PT-2023-21104 · Decon Digital · Decon Wp Sms Plugin

Name of the Vulnerable Software and Affected Versions: Decon Digital Decon WP SMS plugin versions prior to 1.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Decon Digital Decon WP SMS...

ai.h2o:h2o-admissibleml (>=3.34.0.1 <=3.42.0.2), ai.h2o:h2o-algos (>=3.10.5.1 <=3.42.0.2) +51 more potentially affected by CVE-2023-39013 via no.priv.garshol.duke:duke (=1.2)

no.priv.garshol.duke:duke MAVEN version =1.2 is affected by a known vulnerability. The following packages have a transitive dependency on no.priv.garshol.duke:duke and may be impacted: - ai.h2o:h2o-admissibleml =3.34.0.1, =3.10.5.1, =3.10.5.1, =3.12.0.1, =3.10.5.1, =3.10.5.1, =3.14.0.7, =3.16.0.1...

Duke 代码注入漏洞

Duke is a fast and flexible deduplication or entity resolution, or record linking engine written in Java on top of Lucene by Lars Marius Garshol, a personal developer. A security vulnerability exists in Duke v1.2 and earlier versions, which stems from a code injection vulnerability in the compone...

PT-2023-25747 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and...

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A security vulnerability exists in Online Fire Reporting System version 1.2, which is caused by a cross-site scripting XSS vulnerability in the website title field. An attacker can exploit...