65 matches found
CVE-2023-34008: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in weDevs WP ERP plugin = 1.12.3 versions...
PT-2023-24627 · Wedevs · Wedevs Wp Erp
Name of the Vulnerable Software and Affected Versions: weDevs WP ERP plugin versions = 1.12.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to unauthorized...
PT-2022-10565 · Wedevs · Wedevs Wp Project Manager
Name of the Vulnerable Software and Affected Versions: weDevs WP Project Manager plugin versions = 2.4.13 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with certain privileges, such as a subscriber or higher user...
WordPress plugin weDevs WP Project Manager 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress weDevs WP Project Manager plugin has a...
CVE-2021-36826: Improper Neutralization of Input During Web Page Generation
Authenticated subscriber or higher user role if allowed to access projects Stored Cross-Site Scripting XSS vulnerability in weDevs WP Project Manager plugin = 2.4.13 versions...