4 matches found
SUSE CVE-2026-35201
Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...
CVE-2021-46875
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file...
WordPress indieweb-post-kinds plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. indieweb-post-kinds is one of the category plugins used in it. A cross-site scripting vulnerability exists in WordPress...
cmreams cms 1.3.1.1 beta2 (lfi/xss) Multiple Vulnerabilities
No description provided by source...