934 matches found
WordPress plugin Custom Field For WP Job Manager Cross Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
PT-2023-21104 · Decon Digital · Decon Wp Sms Plugin
Name of the Vulnerable Software and Affected Versions: Decon Digital Decon WP SMS plugin versions prior to 1.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Decon Digital Decon WP SMS...
Duke 代码注入漏洞
Duke is a fast and flexible deduplication or entity resolution, or record linking engine written in Java on top of Lucene by Lars Marius Garshol, a personal developer. A security vulnerability exists in Duke v1.2 and earlier versions, which stems from a code injection vulnerability in the compone...
Online Fire Reporting System 跨站脚本漏洞
Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A security vulnerability exists in Online Fire Reporting System version 1.2, which is caused by a cross-site scripting XSS vulnerability in several fields, including team name. The...
Online Fire Reporting System 跨站脚本漏洞
Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A security vulnerability exists in Online Fire Reporting System version 1.2, which is caused by a cross-site scripting XSS vulnerability in the website title field. An attacker can exploit...
PT-2023-25747 · Unknown · Phpgurukul Online Fire Reporting System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and...
CVE-2023-3860
A vulnerability was found in phpscriptpoint Insurance 1.2. It has been classified as problematic. Affected is an unknown function of the file /page.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-235212...
Insurance 跨站脚本漏洞
Insurance is a responsive business and insurance related web content management system CMS from the phpscriptpoint team. A cross-site scripting vulnerability exists in Insurance version 1.2, which stems from the inclusion of unknown functions in the file page.php, resulting in cross-site scriptin...
PT-2023-26530 · Unknown · Phpscriptpoint Insurance
Name of the Vulnerable Software and Affected Versions: phpscriptpoint Insurance version 1.2 Description: A vulnerability was found in the file /search.php, which leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not...
CVE-2023-3848
A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue affects some unknown processing of the file /users/view of the component URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated...
CVE-2023-3846
A vulnerability classified as problematic has been found in mooSocial mooDating 1.2. This affects an unknown part of the file /pages of the component URL Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235197 was assigned...
PT-2023-26457 · Unknown · Moosocial Moodating
Name of the Vulnerable Software and Affected Versions: mooSocial mooDating version 1.2 Description: A problematic vulnerability was found in the URL Handler component, affecting unknown code of the file /users. This issue leads to cross site scripting and can be initiated remotely. Recommendation...
PT-2023-26436 · Unknown · Moosocial Moodating
Name of the Vulnerable Software and Affected Versions: mooSocial mooDating version 1.2 Description: A problem was found in the file /friends/ajax invite of the component URL Handler, which can be exploited to perform cross site scripting. The attack can be launched remotely. Recommendations: For...
mooSocial mooDating 跨站脚本漏洞
mooSocial mooDating is a dating application from mooSocial. A cross-site scripting vulnerability exists in mooSocial mooDating version 1.2, which stems from a cross-site scripting XSS vulnerability in file/friends/ajaxinvite...
mooSocial mooDating 跨站脚本漏洞
mooSocial mooDating is a dating application from mooSocial. A cross-site scripting vulnerability exists in mooSocial mooDating version 1.2, which stems from a cross-site scripting XSS vulnerability in files/pages...
mooSocial mooDating 跨站脚本漏洞
mooSocial mooDating is a dating application from mooSocial. A cross-site scripting vulnerability exists in mooSocial mooDating version 1.2, which stems from a cross-site scripting XSS vulnerability in files/users...
mooSocial mooDating 跨站脚本漏洞
mooSocial mooDating is a dating application from mooSocial. A cross-site scripting vulnerability exists in mooSocial mooDating version 1.2, which stems from a cross-site scripting XSS vulnerability in file/find-a-match...
PT-2023-26418 · Unknown · Moosocial Moodating
Name of the Vulnerable Software and Affected Versions: mooSocial mooDating version 1.2 Description: A problem was found in the URL Handler component, specifically in the /matchmakings/question file, which can lead to cross site scripting. This issue can be exploited remotely. The vendor was...
mooSocial mooDating 跨站脚本漏洞
mooSocial mooDating is a dating application from mooSocial. A cross-site scripting vulnerability exists in mooSocial mooDating version 1.2, which stems from a cross-site scripting XSS vulnerability in file/friends...
mooSocial mooDating 跨站脚本漏洞
mooSocial mooDating is a dating application from mooSocial. A cross-site scripting vulnerability exists in mooSocial mooDating version 1.2, which stems from a cross-site scripting XSS vulnerability in the file /users/view...