180 matches found
CVE-2021-38116 Possible Command injection Vulnerability in OpenText iManager
Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5...
PT-2024-10984 · Opentext · Opentext Imanager
Name of the Vulnerable Software and Affected Versions: OpenText iManager versions prior to 3.2.5 Description: A Possible Elevation of Privilege issue has been discovered in OpenText iManager. This issue impacts all versions before 3.2.5. Recommendations: For versions prior to 3.2.5, update to...
OpenText iManager 安全漏洞
OpenText iManager is a web-based management tool from OpenText Canada. A security vulnerability exists in OpenText iManager prior to version 3.2.5 that stems from a possible elevation of privilege vulnerability in iManager...
Adobe Commerce 安全漏洞
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A security vulnerability exists in Adobe Commerce version 3.2.5 and prior versions, which stems from the inclusion of a server-side request forgery vulnerability that could lead to a security feature...
PT-2024-8727 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 3.2.5 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send...
WordPress plugin Pricing Tables WordPress Plugin – Easy Pricing Tables 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Pricing Tables WordPress Plugin - Eas...
CVE-2024-43971
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Sunshine Sunshine Photo Cart allows Reflected XSS.This issue affects Sunshine Photo Cart: from n/a through 3.2.5...
PT-2024-30834
Name of the Vulnerable Software and Affected Versions WP Sunshine Sunshine Photo Cart versions 3.2.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations...
WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Sunshine Photo Cart versions = 3.2.5...
VulnCheck KEV: CVE-2024-43971
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through = 3.2.5...
BIT-DISCOURSE-2024-39320 Discourse allows iframe injection though default site setting
Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any domain, bypassing the intended restrictions enforced by the allowediframes setting. This vulnerability is fixed in 3.2.5 and 3.3.0.beta5...
CVE-2024-39320 Discourse allows iframe injection though default site setting
Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any domain, bypassing the intended restrictions enforced by the allowediframes setting. This vulnerability is fixed in 3.2.5 and 3.3.0.beta5...
PT-2024-28445 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.2.5 Discourse versions prior to 3.3.0.beta5 Description: The issue allows an attacker to inject iframes from any domain, bypassing the intended restrictions enforced by the allowed iframes setting. Recommendation...
PT-2024-27456 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.2.5 Discourse versions prior to 3.3.0.beta5 Description: The issue concerns crafting requests to submit very long tag group names, which can reduce the availability of a Discourse instance. Recommendations: For...
PT-2024-27317 · Unknown · Biplob018 Shortcode Addons
Name of the Vulnerable Software and Affected Versions: biplob018 Shortcode Addons versions 3.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendation...
PT-2024-28409 · Async · Async
Name of the Vulnerable Software and Affected Versions: Async versions 2.6.4 and earlier, Async versions 3.2.5 and earlier Description: The issue concerns a ReDoS Regular Expression Denial of Service vulnerability while parsing a function in the autoinject function. It is noted that the supplier...
Async Security Vulnerabilities
Async is a utility module by the individual developer Caolan McMahon in the UK. It is used for working with asynchronous JavaScript. A security vulnerability exists in Async versions 2.6.4 and earlier and 3.2.5 and earlier, which stems from vulnerability to a Regular Expression Denial of Service...
WordPress plugin Starter Templates security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-12978 · Brainstorm Force · Brainstorm Force Premium Starter Templates +1
Name of the Vulnerable Software and Affected Versions: Brainstorm Force Premium Starter Templates versions 3.2.5 and earlier Brainstorm Force Starter Templates versions 3.2.5 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects...