4 matches found
EUVD-2023-29684
Malicious code in bioql PyPI...
CVE-2023-25787
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wbolt team WP资源下载管理 plugin = 1.3.9 versions...
CVE-2023-25787
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wbolt team WP资源下载管理 plugin = 1.3.9 versions...
CVE-2023-25787
CVE-2023-25787 affects the WordPress plugin WP资源下载管理 (Download Info Page) versions ≤ 1.3.9. It enables an authenticated administrator (admin+) to perform a Stored Cross-Site Scripting (XSS) attack due to insufficient sanitisation/escaping of certain settings within the plugin. The issue is rooted...