9 matches found
CVE-2026-12120: Exposure of Sensitive Information to an Unauthorized Actor
The FireBox Popups – Increase Sales and Grow Your Email List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.7 via the 'formid' parameter. This makes it possible for unauthenticated attackers to extract download a full CSV export of a...
CVE-2024-8735: Improper Neutralization of Input During Web Page Generation
The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.1.8. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-31349: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MailMunch MailMunch – Grow your Email List allows Stored XSS.This issue affects MailMunch – Grow your Email List: from n/a through 3.1.6...
CVE-2023-41852: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in MailMunch MailMunch – Grow your Email List plugin = 3.1.2 versions...
My-Blog 跨站请求伪造漏洞
My-Blog is by SpringBoot + Mybatis + Thymeleaf and other technologies to achieve the Java blog system , page beautiful , full-featured , easy to deploy and perfect code . A cross-site request forgery vulnerability exists in My-Blog, which stems from a problem in the file...
CVE-2020-15051
An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields...
PT-2020-14146
Name of the Vulnerable Software and Affected Versions Artica Proxy versions prior to 4.30.000000 Description An issue exists in the software where stored XSS is possible via several fields, including the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username,...
CVE-2020-15051: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields...
