Cross site scripting

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...

CVE-2021-41924

CVE-2021-41924 affects Webkul krayin crm prior to 1.2.2. The root cause is an XSS in the datagrid render path (lack of sanitization in v-html in table-body.vue), enabling attacker-controlled script execution when viewing data. Remediation identified: upgrade to version 1.2.2 or newer. Other sourc...

CVE-2021-41924

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...

Webkul krayin crm 跨站脚本漏洞

Webkul krayin crm is a free and open source CRM solution for small and medium sized businesses from Webkul India. A cross-site scripting vulnerability exists in Webkul krayin crm versions prior to 1.2.2, which stems from an XSS vulnerability in datagrid...

CVE-2021-41924: Improper Neutralization of Input During Web Page Generation

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...

Authorization Bypass Through User-Controlled Key in Bagisto

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

GHSA-PWRF-Q7H8-JJR7 Authorization Bypass Through User-Controlled Key in Bagisto

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

ALPINE-CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

Code injection

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, a lack of proper access control allows a user to modify their own data and that of other customers (e.g., address, reviews, orders) via vulnerable customer-endpoints. The root cause is an authorization/control flaw on customer data modification endpoints (e.g., /cu...

CVE-2019-16403: Authorization Bypass Through User-Controlled Key

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

Ajax Quiz by Webkul,2.0,SQL Injection

Ajax Quiz by Webkul, 2.0 and previous, SQL Injection Resolution: update to version 2.1 Update notice: https://store.webkul.com/AjaxQuiz.html...

shopify.webkul.com XSS vulnerability

Vulnerable URL: https://shopify.webkul.com/multivendor/index.php?p=checkseller=prompt/OPENBUGBOUNTY/...

Joomla Ultimate Portfolio 1.0 Local File Inclusion

======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version 1.0 Vendor : http://webkul.com/ Author : AntiSecurity NoGe Vrs-h...

Joomla Component com_ultimateportfolio Local File Inclusion

Exploit for php platform in category web applications ====================================================================== Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability ======================================================================...

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion ======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version...