CVE Vulnerability Catalog

WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by failing to sanitize the post_title parameter. Attackers with editor privileges can inject script payloads through the testimonial title field that execute in the browsers of other users viewing the draft post, enabling cookie theft and session hijacking.

WordPress 3dady Real-Time Web Stats plugin version 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript via unsanitized input fields. Attackers can inject JavaScript payloads in the dady_input_text or dady2_input_text fields in the plugin options panel, leading to code execution when the page is viewed.

Moodle LMS 4.0 has a cross-site scripting (XSS) vulnerability allowing unauthenticated attackers to inject malicious scripts via the search parameter in course/search.php. Attackers can execute arbitrary JavaScript in users' browsers and steal session cookies.

OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint. Attackers can trick authenticated users into submitting hidden forms with new password values in the 'password' and 'confirm' parameters to hijack accounts.

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in the database and executed when the functionality is triggered, enabling session hijacking or credential theft.

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface. Authenticated attackers can inject malicious scripts by manipulating the s_emotion parameter. The script executes when administrators view the smilies tab.

WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text field in payment forms. Attackers can inject malicious HTML including image tags and scripts into the Help Text field during payment form creation, which gets stored in the database and executed in the browser when the form is viewed.

Stored XSS in Projectsend r1295. Authenticated attackers can inject malicious script via the 'name' parameter in files-edit.php, which executes for administrators on the Dashboard.

OpenCart 3.0.3.6 has a cross-site request forgery vulnerability in the /account/edit endpoint, allowing unauthenticated attackers to modify victim account details by tricking users into visiting malicious pages. Attackers can change email addresses and use password reset to take over accounts.

Exponent CMS 2.6 contains a stored XSS vulnerability that allows authenticated attackers to inject malicious scripts via the Title and Text Block parameters in the text editing endpoint. Attackers can inject iframe payloads with embedded SVG onload events to execute arbitrary JavaScript. The application also exposes database credentials in responses and lacks brute-force protection on authentication endpoints.

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.

WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insufficient sanitization of the forum name parameter. Attackers can submit POST requests to the admin setup page with JavaScript payloads in the wps_admin_forum_add_name parameter, which are stored and executed when the forum is accessed.

Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating forms with script tags in the form name field. Attackers can craft form names containing JavaScript code that executes when other logged-in users access the form management page, enabling session hijacking or credential theft.

CMDBuild 3.3.2 contains multiple stored XSS vulnerabilities allowing authenticated attackers to inject arbitrary HTML/JavaScript via employee card parameters or SVG attachments in class endpoints. Scripts execute when other users view modified records or preview attachments.

Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject malicious scripts via the price parameter by submitting POST requests to post.php with HTML/JavaScript payloads, executing arbitrary code when the product is viewed.

Slider by Soliloquy 2.6.2 contains a stored XSS vulnerability allowing authenticated attackers to inject malicious scripts via the title parameter. Scripts execute in browsers of users viewing the slider on both admin and frontend pages.

AccessPress Social Icons 1.8.2 contains a stored XSS vulnerability allowing authenticated attackers to inject malicious scripts via the 'icon title' field. Scripts execute when the plugin page is viewed, affecting all users.

Rocket LMS 1.1 contains a persistent XSS vulnerability in the support ticket module allowing authenticated users to inject malicious script code via the title parameter. Scripts execute in browsers of other users viewing message history, enabling session hijacking and phishing attacks.

Vulnerability in IAS Canias ERP 8.03 in the Login RMI Interface component, where manipulation of the clientVersion argument leads to improper authentication. Remote attack possible, exploit publicly available.

A vulnerability was found in IAS Canias ERP 8.03 in the JNLP Deployment Endpoint component. An unknown function allows remote exploitation of a hard-coded cryptographic key. The vendor did not respond.