150654 matches found
CVE-2025-47939
TYPO3 is an open source, PHP based web content management system. By design, the file management module in TYPO3’s backend user interface has historically allowed the upload of any file type, with the exception of those that are directly executable in a web server context. This lack of restrictio...
PT-2025-22122 · WordPress · Motors
Name of the Vulnerable Software and Affected Versions: Motors WordPress theme versions prior to 5.6.68 Description: The Motors theme for WordPress is vulnerable to privilege escalation via account takeover. This is due to the theme not properly validating a user's identity prior to updating their...
Adobe Connect XSS
The vulnerability of the Adobe Connect instant messaging program is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
an-website (22.6.11), vgs-api-client (>=0.0.1.dev202206171951, <=0.0.45) potentially affected by CVE-2025-47273 via setuptools (62.3.3)
setuptools PYPI version 62.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website 22.6.11 - vgs-api-client =0.0.1.dev202206171951, =0.0.45 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...
an-website (>=22.7.6, <=22.7.22), pypony (>=1.0.0b1, <=1.0.0b2) +1 more potentially affected by CVE-2025-47273 via setuptools (63.1.0)
setuptools PYPI version 63.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.6, =1.0.0b1, =1.0.0b2 - pytrack-lib 2.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...
an-website (>=22.8.8, <=22.8.10), chk (0.4.0) +3 more potentially affected by CVE-2025-47273 via setuptools (63.4.2)
setuptools PYPI version 63.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.8, =1.0.5, =1.0.8, =1.15.20, =1.15.53 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...
an-website (>=22.5.20, <=22.6.10), carml (>=22.7.0, <=22.7.1) +4 more potentially affected by CVE-2025-47273 via setuptools (62.3.2)
setuptools PYPI version 62.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.5.20, =22.7.0, =2.1.5a1, =0.0.0, =2.3.0rc3 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...
WordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Visual Composer Website Builder versions = 45.11.0...
WordPress plugin Visual Composer Website Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A cross-site scripting...
PT-2025-21982 · Unknown · Visual Composer Website Builder
Name of the Vulnerable Software and Affected Versions: Visual Composer Website Builder versions through 45.11.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in Visual Composer Website...
CVE-2025-48276: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through = 45.11.0...
an-website (>=22.7.6, <=22.7.22), pypony (>=1.0.0b1, <=1.0.0b2) +1 more potentially affected by CVE-2025-47273 via setuptools (63.1.0)
setuptools PYPI version 63.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.6, =1.0.0b1, =1.0.0b2 - pytrack-lib 2.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...
an-website (>=22.8.5, <=22.8.7), flarestack (2.4.5) +3 more potentially affected by CVE-2025-47273 via setuptools (63.4.1)
setuptools PYPI version 63.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.5, =0.1.1, =0.0.4, =0.1.5 - support-dh 0.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...
an-website (>=22.5.13, <=22.5.18), dsp-tools (1.15.0) +5 more potentially affected by CVE-2025-47273 via setuptools (62.2.0)
setuptools PYPI version 62.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.5.13, =0.0.7, =0.3.8, =0.0.1, =0.0.16 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...
an-website (22.6.11), vgs-api-client (>=0.0.1.dev202206171951, <=0.0.45) potentially affected by CVE-2025-47273 via setuptools (62.3.3)
setuptools PYPI version 62.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website 22.6.11 - vgs-api-client =0.0.1.dev202206171951, =0.0.45 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...
CVE-2025-47785 EMLOG SQL Injection Vulnerability
Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/articlesave.php is not strictly filtered. Since admin/articlesave.php can be accessed by ordinary registered users, this will cause SQL injectio...
CVE-2025-47785 EMLOG SQL Injection Vulnerability
Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/articlesave.php is not strictly filtered. Since admin/articlesave.php can be accessed by ordinary registered users, this will cause SQL injectio...
CVE-2025-47785 EMLOG SQL Injection Vulnerability
Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/articlesave.php is not strictly filtered. Since admin/articlesave.php can be accessed by ordinary registered users, this will cause SQL injectio...
CVE-2025-44184
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the websiteimage, fname, lname, contact, username, and address parameters...
