Results
39,956· Page 589/800Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlueGlass Jobs for
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Form Plugin Team -
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PineWise WP Google
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in libsyn Libsyn Publ
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Short
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Schuppenie
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Ad
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RexTheme Product Feed Ma
A vulnerability was found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this issue is
TCPDF before 6.7.4 mishandles calls that use HTML syntax.
In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak p
A vulnerability has been found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this vul
The Simple Buttons Creator WordPress plugin through 1.04 does not have CSRF checks in some places, which could allow att
The Simple Buttons Creator WordPress plugin through 1.04 does not have any authorisation as well as CSRF in its add butt
The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.64 does not sanitise and escape
The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers
The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users
The Responsive Tabs WordPress plugin before 4.0.7 does not validate and escape some of its shortcode attributes before o
The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to
The NPS computy WordPress plugin through 2.7.5 does not sanitise and escape some of its settings, which could allow high
The Testimonial Slider WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allo
The Carousel Slider WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow h
The Top Bar WordPress plugin before 3.0.5 does not sanitise and escape some of its settings, which could allow high priv
The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking produ
The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow us
The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to
The Meta Box WordPress plugin before 5.9.4 does not prevent users with at least the contributor role from access arbitr
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could
The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before
The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high
The WP User Profile Avatar WordPress plugin through 1.0.1 does not validate and escape some of its shortcode attributes
The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attacker
The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset
The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated re
aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does not properly restrict user inpu
A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an un
A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue
A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code
Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to
aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restriction
Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service vi
A vulnerability, which was classified as problematic, has been found in slowlyo OwlAdmin up to 3.5.7. Affected by this i
Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to p
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, a
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing
Test your stack for 2024issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.