2023

Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma `name` parameter allows a pers

Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma status page allows a persisten

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by

A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourCo

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. T

The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ paramet

Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitra

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS pa

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administra

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.

iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting (XSS) when handli

The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender v

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-ht

Cockpit is a content management system that allows addition of content management functionality to any site. In versions

Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to

Vditor is a browser-side Markdown editor. Versions prior to 3.8.7 are vulnerable to copy-paste cross-site scripting (XSS

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting

A vulnerability was found in irontec klear-library chloe and classified as critical. Affected by this issue is the funct

A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability i

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.  An attac

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown

A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is s

A vulnerability was found in DolphinPHP up to 1.5.1. It has been declared as critical. Affected by this vulnerability is

php-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver user because resolving XML

The GS Portfolio for Envato WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes

The GS Books Showcase WordPress plugin before 1.3.1 does not validate and escape some of its shortcode attributes before

The GS Filterable Portfolio WordPress plugin before 1.6.1 does not validate and escape some of its shortcode attributes

The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode

The WP Private Message WordPress plugin (bundled with the Superio theme as a required plugin) before 1.0.6 does not ensu

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outpu

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape some of its settings, which could allow high

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the

The Shortcode for Font Awesome WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attribut

The Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before

The Greenshift WordPress plugin before 5.0 does not validate and escape some of its block options before outputting them

The Easy Affiliate Links WordPress plugin before 3.7.1 does not validate and escape some of its block options before out

The EmbedStories WordPress plugin before 0.7.5 does not validate and escape some of its shortcode attributes before outp

The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outp

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its shortcode attributes before o

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which coul

The WP Font Awesome WordPress plugin before 1.7.9 does not validate and escape some of its shortcode attributes before o

The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting th

The Timed Content WordPress plugin before 2.73 does not validate and escape some of its shortcode attributes before outp

The Youzify WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputtin

The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back i

The Product Slider and Carousel with Category for WooCommerce WordPress plugin before 2.8 does not validate and escape o

The Video.js WordPress plugin through 4.5.0 does not validate and escape some of its shortcode attributes before outputt

The Video Sidebar Widgets WordPress plugin through 6.1 does not validate and escape some of its shortcode attributes bef

The Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before ou