CVE-2025-58666

Missing Authorization vulnerability in Kommo Website Chat Button: Kommo integration website-chat-button-kommo-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Website Chat Button: Kommo integration: from n/a through = 1.3.1...

CVE-2025-10793

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...

The vulnerability of the tools for collaborative work and content management in ENOVIA Collaborative Industry Innovator lies in the lack of measures to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the tools for collaborative work and content management in ENOVIA Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site...

The vulnerability of the JEvents component of the Joomla! content management system allows a hacker to execute arbitrary code.

The vulnerability of the JEvents component in the Joomla! content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the software for managing Product Managers, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Product Manager’s software management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of collaborative tool sets for content management and collaboration, as described in the Collaborative Industry Innovator, arises from the lack of measures to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the collaborative toolset for content collaboration and management in Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform...

The vulnerability of the ENOVIA Change Manager software for managing changes and configurations in engineering and manufacturing processes lies in the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the ENOVIA Change Manager software for managing changes and configurations in engineering and production processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the software solution for managing project portfolios, Project Portfolio Manager, arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for managing project portfolios with Project Portfolio Manager is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the software solution for multidisciplinary optimization, the Multidisciplinary Optimization Engineer, arises from the lack of measures taken to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for multidisciplinary optimization relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Items Management Service component of the software solution for designing and optimizing service processes, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Items Management Service component of the software solution for designing and optimizing service processes, Service Process Engineer, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the SolarWinds Serv-U File Server file server, related to the lack of protective measures for the website structure, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the SolarWinds Serv-U File Server file server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of collaborative tool sets for content management and collaboration, as described in the Collaborative Industry Innovator, arises from the lack of measures to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the collaborative toolset for content collaboration and management in Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform...

The vulnerability of the software for managing Product Managers, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Product Manager’s software management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the tools for collaborative work and content management in ENOVIA Collaborative Industry Innovator lies in the lack of measures to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the tools for collaborative work and content management in ENOVIA Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site...

The vulnerability of the software for Product Managers, related to the failure to take measures to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the software used by Product Managers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2025-58677

Cross-Site Request Forgery CSRF vulnerability in puravida1976 ShrinkTheWeb STW Website Previews shrinktheweb-website-preview-plugin allows Stored XSS.This issue affects ShrinkTheWeb STW Website Previews: from n/a through = 2.8.5...

CVE-2025-58666

Missing Authorization vulnerability in Kommo Website Chat Button: Kommo integration website-chat-button-kommo-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Website Chat Button: Kommo integration: from n/a through = 1.3.1...

CVE-2025-58666 WordPress Website Chat Button: Kommo integration Plugin <= 1.3.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Kommo Website Chat Button: Kommo integration website-chat-button-kommo-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Website Chat Button: Kommo integration: from n/a through = 1.3.1...