276 matches found
Italtel Embrace 安全漏洞
Italtel Embrace is a software-only, cloud-enabled Web application server from Italtel. It can be used to enable WebRTC services in a TLC network or as a standalone WebRTC service. A security vulnerability exists in Italtel Embrace version 1.6.4, which stems from a stored cross-site scripting XSS...
WordPress CF7 WOW Styler plugin <= 1.6.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin CF7 WOW Styler versions = 1.6.4...
WordPress Meks Smart Social Widget plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Meks Smart Social Widget versions = 1.6.4...
WordPress plugin Meks Smart Social Widget 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
PT-2024-25449 · Unknown · Meks Smart Social Widget
Name of the Vulnerable Software and Affected Versions: Meks Smart Social Widget versions 1.6.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...
WordPress Meks Smart Social Widget Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)
Software Meks Smart Social Widget Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33693 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 92d549959266 Credits Joshua Chan Required privileg...
WordPress plugin Filterable Portfolio 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-29880 · Unknown · Sayful Islam Filterable Portfolio
Name of the Vulnerable Software and Affected Versions: Sayful Islam Filterable Portfolio versions 1.6.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can injec...
Italtel Embrace 安全漏洞
Italtel Embrace is a software-only, cloud-enabled Web application server from Italtel. It can be used to enable WebRTC services in a TLC network or as a standalone WebRTC service. A security vulnerability exists in Italtel Embrace version 1.6.4 that could allow an unauthorized attacker to access...
PT-2024-24238 · Italtel · Italtel Embrace
Name of the Vulnerable Software and Affected Versions: Italtel Embrace version 1.6.4 Description: An issue was discovered where the web server fails to sanitize input data, allowing remote unauthenticated attackers to read arbitrary files on the filesystem. Recommendations: For Italtel Embrace...
Italtel Embrace 安全漏洞
Italtel Embrace is a software-only, cloud-enabled Web application server from Italtel. It can be used to enable WebRTC services in a TLC network or as a standalone WebRTC service. A security vulnerability exists in Italtel Embrace version 1.6.4, which stems from an arbitrary file read vulnerabili...
PT-2024-24243 · Italtel · Italtel Embrace
Name of the Vulnerable Software and Affected Versions: Italtel Embrace version 1.6.4 Description: An issue was discovered in the web application where it does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Recommendations: For Italtel Embrace version 1.6.4,...
CVE-2024-32125
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Booking Algorithms BA Book Everything.This issue affects BA Book Everything: from n/a through 1.6.4...
WordPress BA Book Everything plugin <= 1.6.4 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Thanh Nam Tran Patchstack Alliance in WordPress Plugin BA Book Everything versions = 1.6.4...
EyouCms Security Vulnerability
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms v1.6.4, which stems from the existence of a PHP file inclusion vulnerability...
VulnCheck KEV: CVE-2023-22478
KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds...
CVE-2023-48880
A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&ajax=1&lang=cn...
EyouCMS Security Vulnerability
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from the presence of a stored cross-site scripting XSS vulnerability...
EyouCMS Security Vulnerability
Zanzan Network Technology EyouCms EyouCMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from a stored cross-site scripting XSS vulnerability in the Document Properties...
EyouCMS Security Vulnerability
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from the presence of a stored cross-site scripting XSS vulnerability...