2023

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administra

A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a fac

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.

iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting (XSS) when handli

The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender v

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-ht

Cockpit is a content management system that allows addition of content management functionality to any site. In versions

Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to

Vditor is a browser-side Markdown editor. Versions prior to 3.8.7 are vulnerable to copy-paste cross-site scripting (XSS

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting

A vulnerability was found in irontec klear-library chloe and classified as critical. Affected by this issue is the funct

A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability i

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student

SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute

A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.  An attac

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown

A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is s

A vulnerability was found in DolphinPHP up to 1.5.1. It has been declared as critical. Affected by this vulnerability is

php-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver user because resolving XML

The GS Portfolio for Envato WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes

The GS Books Showcase WordPress plugin before 1.3.1 does not validate and escape some of its shortcode attributes before

The GS Filterable Portfolio WordPress plugin before 1.6.1 does not validate and escape some of its shortcode attributes

The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode

The WP Private Message WordPress plugin (bundled with the Superio theme as a required plugin) before 1.0.6 does not ensu

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outpu

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape some of its settings, which could allow high

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the

The Shortcode for Font Awesome WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attribut

The Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before

The Greenshift WordPress plugin before 5.0 does not validate and escape some of its block options before outputting them

The Easy Affiliate Links WordPress plugin before 3.7.1 does not validate and escape some of its block options before out

The EmbedStories WordPress plugin before 0.7.5 does not validate and escape some of its shortcode attributes before outp

The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outp

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its shortcode attributes before o

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which coul

The WP Font Awesome WordPress plugin before 1.7.9 does not validate and escape some of its shortcode attributes before o

The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and

The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting th

The Timed Content WordPress plugin before 2.73 does not validate and escape some of its shortcode attributes before outp

The Youzify WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputtin

The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back i

The Product Slider and Carousel with Category for WooCommerce WordPress plugin before 2.8 does not validate and escape o

The Video.js WordPress plugin through 4.5.0 does not validate and escape some of its shortcode attributes before outputt

The Video Sidebar Widgets WordPress plugin through 6.1 does not validate and escape some of its shortcode attributes bef

The Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before ou

The Bootstrap Shortcodes WordPress plugin through 3.4.0 does not validate and escape some of its shortcode attributes be

The Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode attributes