CVE-2024-58353

Cal.com repository calcom/cal.diy in versions . Booking question form field labels are rendered via React's dangerouslySetInnerHTML without proper input sanitization or CSP, so an attacker who can create an event type with a malicious booking question label can inject arbitrary HTML/JavaScript th...

CVE-2023-27083

An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code via manage file functionality...

Pluck 代码问题漏洞

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck CMS versions 4.7.15 through 4.7.16-dev5. An attacker can exploit the vulnerability to run arbitrary code via the Manage Files feature...

Pluck跨站请求伪造漏洞

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck CMS v4.7.15 that allows an attacker to delete arbitrary pages...

Pluck Path Traversal Vulnerability

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck-CMS Pluck that stems from a Zip Slip vulnerability in Pluck-CMS Pluck version 4.7.15 that allows an attacker to upload specially crafted zip files, leading to directory traversal an...

Pluck 路径遍历漏洞

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck-CMS Pluck that stems from a Zip Slip vulnerability in Pluck-CMS Pluck version 4.7.15 that allows an attacker to upload specially crafted zip files, leading to directory traversal an...