CVE-2022-30007

GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server...

CVE-2020-21358

A cross site request forgery CSRF in Wage-CMS 1.5.x-dev allows attackers to arbitrarily add users...

CVE-2010-1433

Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate...

CVE-2012-4071

Cross-site scripting XSS vulnerability in the comments module in the RSGallery2 comrsgallery2 component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment...

CVE-2018-20559

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter...

UBUNTU-CVE-2025-32807

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...

CVE-2025-32678

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through = 1.5...

WordPress plugin WP Show Stats 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin Limit Max IPs Per User 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

VyOS 安全漏洞

VyOS is a fully open source enterprise router platform from VyOS Open Source. A security vulnerability exists in VyOS versions 1.3 through 1.5 that stems from the same Dropbear private key in different installations, which could lead to a man-in-the-middle attack against SSH connections...

CVE-2025-30542

Cross-Site Request Forgery CSRF vulnerability in wpsolutions SoundCloud Ultimate soundcloud-ultimate allows Cross Site Request Forgery.This issue affects SoundCloud Ultimate: from n/a through = 1.5...

CVE-2025-30574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jenst Mobile Navigation mobile-navigation allows Stored XSS.This issue affects Mobile Navigation: from n/a through = 1.5...

CVE-2025-30574

CVE-2025-30574 affects the Mobile Navigation WordPress plugin (Mobile Navigation) up to version 1.5. The issue is a Stored XSS due to improper neutralization during web page generation. Fragment from Wordfence documentation confirms the vulnerability class (Stored Cross-Site Scripting) and the af...

CVE-2025-30574 WordPress Mobile Navigation plugin <= - 1.5 Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jenst Mobile Navigation mobile-navigation allows Stored XSS.This issue affects Mobile Navigation: from n/a through = 1.5...

WordPress Mobile Navigation plugin <= - 1.5 Cross Site Scripting (XSS) Vulnerability

1.5 Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Mobile Navigation versions = 1.5...

WordPress plugin Mobile Navigation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

CVE-2024-9149

CVE-2024-9149 describes an SQL injection vulnerability in Wind Media E-Commerce Website Template, affecting versions before v1.5. The issue arises from improper neutralization of special elements in SQL commands within the template’s code. Practical impact as stated: high confidentiality impact a...

Wind Media E-Commerce Website Template SQL注入漏洞

Wind Media E-Commerce Website Template is an e-commerce template from Wind Media, Inc. A SQL injection vulnerability exists in Wind Media E-Commerce Website Template versions prior to v1.5, which stems from susceptibility to SQL injection attacks...

WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin WP About Author versions = 1.5...

CVE-2025-27328 WordPress WP-PostRatings Cheater Plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in queeez WP-PostRatings Cheater wp-postratings-cheater allows Cross Site Request Forgery.This issue affects WP-PostRatings Cheater: from n/a through = 1.5...