CVE Vulnerability Catalog

An open redirect vulnerability has been found in Mayan EDMS up to version 4.10.1, affecting an unknown function in the /authentication/ file. The attack can be performed remotely. The exploit is publicly available. Upgrading to version 4.10.2 resolves the issue.

A cross-site scripting (XSS) vulnerability has been detected in Mayan EDMS up to version 4.10.1, affecting an unknown function in the /authentication/ file. The attack can be performed remotely. The exploit is now public. Upgrading to version 4.10.2 fixes the issue.

A vulnerability was found in aizuda snail-job up to 1.6.0, affecting the function QLExpressEngine.doEval in QLExpressEngine.java. The manipulation results in injection, and the attack can be launched remotely. Upgrading to version 1.7.0-beta1 addresses this issue.

A flaw has been found in DecoCMS Mesh up to 1.0.0-alpha.31. Affected by this vulnerability is the function createTool of the file packages/sdk/src/mcp/teams/api.ts of the component Workspace Domain Handler. This manipulation of the argument domain causes improper access controls. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been published and may be used. Upgrading to version 1.0.0-alpha.32 addresses this issue. Patch name: 5f7315e05852faf3a9c177c0a34f9ea9b0371d3d. It is recommended to upgrade the affected component.

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them.

The Addon Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 1.14.3 due to insufficient input sanitization and output escaping on multiple widget parameters. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts via multiple widget parameters in pages that will execute whenever a user accesses an injected page.

In the Computer Laboratory System 1.0 from code-projects, a vulnerability was found in the file technical_staff_pic.php, where manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely, and the exploit has been publicly disclosed.

In the Computer Laboratory System 1.0 from code-projects, a vulnerability was found in the file admin/admin_pic.php, where manipulation of the argument image causes unrestricted upload. The attack may be initiated remotely, and the exploit has been published.

The a3 Lazy Load plugin for WordPress (all versions up to and including 2.7.5) is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user supplied attributes. An authenticated attacker with contributor-level access and above can inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sg_popup' shortcode in all versions up to and including 4.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to and including 4.5.8 due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The TI WooCommerce Wishlist plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.10.0. This is due to the plugin accepting hidden fields and not limiting the values or data that can be input and is later output. This makes it possible for unauthenticated attackers to inject arbitrary HTML into wishlist items.

The WPS Visitor Counter WordPress plugin through 1.4.8 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers. An attacker can inject malicious scripts that execute in the victim's browser.

The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Hero Header and Pricing Table widgets. This is due to insufficient input sanitization and output escaping on user supplied attributes. It affects all versions up to and including 3.9.1.

The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team and Countdown widgets in all versions up to and including 2.5.6 due to insufficient input sanitization and output escaping on user supplied attributes.

The Enter Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown and Image Comparison widgets in all versions up to and including 2.2.7 due to insufficient input sanitization and output escaping on user supplied attributes.

The YITH WooCommerce Quick View plugin for WordPress (all versions up to and including 2.7.0) is vulnerable to Stored Cross-Site Scripting via the plugin's yith_quick_view shortcode due to insufficient input sanitization and output escaping on user supplied attributes. An authenticated attacker with contributor-level access and above can inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The MarqueeAddons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Marquee widget in all versions up to and including 2.4.3 due to insufficient input sanitization and output escaping on user supplied attributes.

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison and Subscribe widgets in all versions up to and including 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes.

The King Addons for Elementor plugin for WordPress up to version 51.1.39 contains a stored Cross-Site Scripting (XSS) vulnerability in the Pricing Slider, Pricing Calculator, and Image Accordion widgets. This is due to insufficient input sanitization and output escaping on user-supplied attributes.