CVE-2024-52000

Combodo iTop is a simple, web based IT Service Management tool. Affected versions are subject to a reflected Cross-site Scripting XSS exploit by way of editing a request's payload which can lead to malicious javascript execution. This issue has been addressed in version 3.2.0 via systematic...

PT-2025-5511 · Unknown · Hasthemes Extensions For Cf7

Name of the Vulnerable Software and Affected Versions: HasThemes Extensions For CF7 versions 3.2.0 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to perform Server Side Request Forgery. Recommendations: For versions 3.2.0 and...

WordPress plugin Extensions For CF7 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA version 3.2.0 that stems from vulnerability to SQL injection attacks via the nextPage parameter in /controle/control.php...

CVE-2025-23424

Cross-Site Request Forgery CSRF vulnerability in bnovotny Marquee Style RSS News Ticker marquee-style-rss-news-ticker allows Cross Site Request Forgery.This issue affects Marquee Style RSS News Ticker: from n/a through = 3.2.0...

CVE-2024-54411 WordPress WP Controller plugin <= 3.2.0 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in hosting.io, campaigns.io WP Controller allows Stored XSS.This issue affects WP Controller: from n/a through 3.2.0...

CVE-2024-54411

CVE-2024-54411 involves WP Controller (WordPress plugin) with a CSRF to Stored XSS vulnerability affecting WP Controller versions up to 3.2.0. Connected sources (Red Hat, Wordfence) corroborate the CSRF-to-Stored-XSS description and indicate the patch status as Unpatched; no public exploit detail...

CVE-2023-22697

Missing Authorization vulnerability in Survey Maker team Survey Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through 3.2.0...

CVE-2023-22697

CVE-2023-22697 concerns the WordPress plugin Survey Maker (

CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

PT-2024-11975 · Unknown · Survey Maker

Name of the Vulnerable Software and Affected Versions: Survey Maker versions through 3.2.0 Description: The issue is related to missing authorization in Survey Maker, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through 3.2.0, updat...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.0, which stems from a failure to verify permissions when changing passwords...

CVE-2024-53473

CVE-2024-53473 concerns WeGIA. The affected software is WeGIA version 3.2.0 before 3998672, where the password-change operation does not verify user permissions. This can allow unauthorized password changes. Public references consolidate that the fix is in 3998672 and later. Practical impact is u...

CVE-2024-53470

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gatewaypagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

PT-2024-35752 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA version 3.2.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in WeGIA. This issue allows an attacker to trick a user into performing unintended actions on a web application. Recommendations: For WeGIA version 3.2.0,...

PT-2024-35750 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA version 3.2.0 Description: Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gateway pagamento.php allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA version v3.2.0. An attacker can exploit the vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload with the id or name...

CVE-2024-52000

Combodo iTop is a simple, web based IT Service Management tool. Affected versions are subject to a reflected Cross-site Scripting XSS exploit by way of editing a request's payload which can lead to malicious javascript execution. This issue has been addressed in version 3.2.0 via systematic...

CVE-2024-52000 Reflected Cross-site Scripting exploit in Combodo iTop

Combodo iTop is a simple, web based IT Service Management tool. Affected versions are subject to a reflected Cross-site Scripting XSS exploit by way of editing a request's payload which can lead to malicious javascript execution. This issue has been addressed in version 3.2.0 via systematic...

CVE-2024-52000

CVE-2024-52000 affects Combodo iTop (prior to version 3.2.0): a reflected Cross-site Scripting (XSS) vulnerability triggered by editing a request payload, potentially enabling malicious JavaScript execution. The issue is mitigated in version 3.2.0 via systematic escaping of error messages when re...