407 matches found
Kliqqi 安全漏洞
Kliqqi is a Content Management System CMS. A security vulnerability exists in Kliqqi-CMS version 2.0.2, which originates from a SQL injection vulnerability in the file loaddata.php...
PT-2025-31019 · Unknown · Cosmwasm-Std
Name of the Vulnerable Software and Affected Versions: cosmwasm-std crate versions prior to 2.0.2 Description: The cosmwasm-std crate contains an integer overflow issue that can lead to incorrect contract calculations. Recommendations: Update to version 2.0.2 or later...
PT-2024-24625 · Unknown · Dethemekit For Elementor
Name of the Vulnerable Software and Affected Versions: DethemeKit For Elementor versions through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means an attacker can inject...
WordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin DethemeKit For Elementor versions = 2.0.2...
WordPress DethemeKit For Elementor Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
Software DethemeKit For Elementor Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32508 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c3d2d2de543b Credits Khalid Yusuf Required privile...
IBM Storage Defender 安全漏洞
IBM Storage Defender is a solution from International Business Machines IBM that provides end-to-end data resiliency. A security vulnerability exists in IBM Storage Defender - Resiliency Service versions 2.0.0 through 2.0.2 that stems from incorrect integrity checks...
WordPress Builderall Builder for WordPress Plugin <= 2.0.1 is vulnerable to Server Side Request Forgery (SSRF)
Software Builderall Builder for WordPress Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.0.2 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-30532 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 22729fc307...
CVE-2024-27922 HTTP Handling Vulnerability in the Bare server
TOMP Bare Server implements the TompHTTP bare server. A vulnerability in versions prior to 2.0.2 relates to insecure handling of HTTP requests by the @tomphttp/bare-server-node package. This flaw potentially exposes the users of the package to manipulation of their web traffic. The impact may var...
GHSA-86FC-F9GR-V533 HTTP Handling Vulnerability in the Bare server
Impact This vulnerability relates to insecure handling of HTTP requests by the @tomphttp/bare-server-node package. This flaw potentially exposes the users of the package to manipulation of their web traffic. The impact may vary depending on the specific usage of the package but it can potentially...
CVE-2024-2078 Cross-Site Scripting vulnerability in HelpDeskZ
A Cross-Site Scripting XSS vulnerability has been found in HelpDeskZ affecting version 2.0.2 and earlier. This vulnerability could allow an attacker to send a specially crafted JavaScript payload within the email field and partially take control of an authenticated user's browser session...
WordPress Themify Icons Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Themify Icons Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51693 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 83a7321eca30 Credits Ray Wilson Required privilege Contributo...
PT-2023-30937 · Unknown · Salient Core
Name of the Vulnerable Software and Affected Versions: Salient Core versions n/a through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
PT-2023-30936 · Unknown · Salient Core
Name of the Vulnerable Software and Affected Versions: Salient Core versions n/a through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...
WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Salient Core Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48749 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ef3d6f0a3d43 Credits Rafie Muhammad Patchstack Required...
PT-2023-29333 · WordPress · Timely Booking Button
Name of the Vulnerable Software and Affected Versions: Timely Booking Button plugin versions = 2.0.2 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts into the system, whi...
WordPress Timely Booking Button Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Timely Booking Button Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-44987 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7f597f7217c8 Credits yuyudhn Required...
CVE-2023-40587
Pyramid (Python web framework) versions 2.0.0–2.0.1 are affected by a directory-traversal vulnerability in a Pyramid static view that can disclose index.html located one directory above the static view path when accessed with Python 3.11. The issue stems from os.path.normpath behavior and affects...
Barebones CMS Cross-Site Scripting Vulnerability
Barebones CMS is an open source software from Barebones CMS, Inc. A cross-site scripting vulnerability exists in Barebones CMS version v2.0.2, which stems from a cross-site scripting vulnerability in user interaction with certain features on the admin panel...
PT-2023-11596 · Yunyecms · Yunyecms
Name of the Vulnerable Software and Affected Versions: yunyecms version 2.0.2 Description: The issue allows remote attackers to run arbitrary SQL commands via the XFF variable. This can potentially lead to unauthorized access and manipulation of database content. Recommendations: For yunyecms...