CVE Vulnerability Catalog

The Kingcabs theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'progressbarLayout' parameter in all versions up to and including 1.1.9 due to insufficient input sanitization and output escaping.

ShineLan-X contains a stored cross-site scripting (XSS) vulnerability in the Plant Name field. An HTML payload will be displayed on the plant management page via a direct post, which may allow attackers to force a legitimate user's browser's JavaScript engine to run malicious code.

ShineLan-X contains a stored cross-site scripting (XSS) vulnerability in the local configuration web server. The JavaScript code snippet can be inserted in the communication module's settings center, which may allow attackers to force a legitimate user's browser's JavaScript engine to run malicious code.

A vulnerability was found in the JW Library app (up to version 15.5.1) on Android, involving an unknown function of the org.jw.jwlibrary.mobile.activity.SiloContainer component. Manipulation leads to path traversal. Local access is required, and the exploit has been publicly disclosed.

A vulnerability was detected in OFFIS DCMTK up to version 3.6.9, affecting the function DcmByteString::makeDicomByteString in the file dcmdata/libsrc/dcbytstr.cc of the dcmdata component. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to version 3.7.0 resolves the issue.

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. The function pickle.loads in the file pickle_convert.go of the Pickle Decoding component is affected. The manipulation leads to deserialization. The attack can be initiated remotely but requires high complexity.

A weakness has been identified in code-projects Prison Management System 2.0 in some unknown processing of the file /admin/search.php. Manipulation of the keyname argument leads to SQL injection. The attack may be performed remotely and the exploit is publicly available and could be used for attacks.

A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user. This manipulation of the argument User causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

The HAPPY – Helpdesk Support Ticket System plugin for WordPress up to version 1.0.9 is vulnerable to authorization bypass due to a missing capability check on the 'submit_form_reply' AJAX action. Authenticated attackers with Subscriber-level access can submit replies to arbitrary support tickets by manipulating the 'happy_topic_id' parameter.

The Shortcode Ajax plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to and including 1.0. This is due to improper validation before running do_shortcode, allowing unauthenticated attackers to execute arbitrary shortcodes.

The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress up to version 2.3.1 is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv REST API endpoint. Authenticated attackers with Author-level access can delete all folder organization data created by Administrators and other users.

The 404 Solution plugin for WordPress in versions up to and including 3.1.0 is vulnerable to SQL Injection due to insufficient escaping of the filterText parameter in the ajaxUpdatePaginationLinks AJAX action. The sanitization logic can be bypassed using the sequence '*$/', which becomes '*/' after the '$' character is removed, allowing escape from SQL comment context. An authenticated attacker with administrator-level access can append additional SQL queries and extract sensitive data via time-based blind SQL injection.

The Lucky Draw Contests plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce validation in misc-settings.php. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

The Image Slider by Ays - Responsive Slider and Carousel plugin for WordPress up to version 2.7.0 is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the bulk delete functionality. This allows unauthenticated attackers to delete arbitrary sliders via a forged request if they can trick a site administrator into clicking a link.

The Solutions Ad Manager plugin for WordPress is vulnerable to Open Redirect in all versions up to and including 1.0.0 due to insufficient validation on the redirect URL supplied via the 'sam-redirect-to' parameter. This allows unauthenticated attackers to redirect users to potentially malicious sites if they can trick them into performing an action.

The AnnunciFunebri Impresa plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the annfu_reset_options() function in all versions up to and including 4.7.0. Authenticated attackers with Subscriber-level access and above can delete all 29 plugin options, resetting the plugin to its default state.

The Popup Builder (Easy Notify Lite) plugin for WordPress up to version 1.1.37 is vulnerable to unauthorized modification of data due to a missing capability check on the easynotify_cp_reset() function. Authenticated attackers with Subscriber-level access can reset plugin settings to their default values.

The Popover Windows plugin for WordPress is vulnerable to unauthorized data modification due to missing capability checks on multiple AJAX actions in all versions up to 1.2. This allows authenticated attackers with subscriber-level access and above to modify plugin settings and content.

The WordPress plugin Popover Windows in versions up to and including 1.2 is vulnerable to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation. This allows unauthenticated attackers to update the plugin's settings via a forged request if they can trick an administrator into clicking a link.

The Quick Testimonials plugin for WordPress up to version 2.1 contains a stored Cross-Site Scripting (XSS) vulnerability in admin settings. This is due to insufficient input sanitization and output escaping.