CVE Vulnerability Catalog

The MStore API plugin for WordPress contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 4.18.4.

The reCAPTCHA (v2 & v3) for Asgaros Forum plugin up to version 1.1.0 contains a DOM-based XSS vulnerability. Improper input neutralization during page generation allows injection of malicious scripts.

The Better Payment plugin for WordPress contains a vulnerability due to improper validation of specified quantity in input, allowing an attacker to access functionality not properly constrained by ACLs. This issue affects versions up to and including 2.2.0.

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. This vulnerability affects Apache Gravitino from version 1.0.0 through 1.2.1.

In PrestaShop 8.2.1, a vulnerability exists due to improper sanitization of the 'Alias' parameter in the 'Update your address' function. An attacker can inject malicious expressions that are executed when data is exported using the 'Get my data in CSV' tool.

A vulnerability in Mattermost allows a user with webhook management permissions to create posts or direct messages attributed to another user. The issue stems from missing validation that the assigned incoming webhook user has access to the target team or channel.

A vulnerability in Mattermost allows a deactivated guest user to obtain an active session using a magic-link token issued before deactivation. The issue affects versions 11.7.x up to 11.7.2 and 11.6.x up to 11.6.4.

A vulnerability in Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, and 10.11.x <= 10.11.19 fails to invalidate OAuth refresh tokens upon user account deactivation. This allows a deactivated user or an attacker with a valid refresh token to obtain new functional access tokens via the OAuth refresh token grant endpoint.

A vulnerability in Mattermost allows an authenticated attacker to perform a Denial of Service (DoS) attack on all users in a channel. The issue stems from missing validation of the length and content of message attachment field values, causing catastrophic backtracking in the client-side Markdown parser.

A vulnerability in Shibby Tomato up to version 1.28.0000 allows OS command injection via the CIFS Mount Handler component's sub_2D048 function. Manipulating the cifs1/cifs2 argument enables remote command execution. The exploit is publicly available, increasing attack risk.

A security flaw in Shibby Tomato up to 1.28.0000 affects the sub_2D568 function of the start_jffs2 component. Manipulating the jffs2_exec argument leads to OS command injection. Remote exploitation is possible and the exploit has been publicly released.

A vulnerability in Mattermost allows an authenticated user without access to a private channel to trigger interactive post actions on posts in that channel. The issue stems from a failure to verify that the channel referenced in an action cookie matches the channel of the target post.

A vulnerability in Mattermost allows an authenticated remote cluster to modify or delete posts authored by local users or other remote clusters in shared channels. The issue is due to missing post ownership verification in the shared channel inbound sync handler.

A vulnerability in Mattermost allows an ordinary group or direct message member to remove all participants from a conversation via the channel patch API. This affects versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, and 10.11.x <= 10.11.19, where the group_constrained flag is not properly restricted to public and private channels that support group synchronization.

The Joomla extension Helix Ultimate before version 2.2.7 is vulnerable to unauthenticated stored XSS. An attacker can inject malicious script without authentication.

A vulnerability was found in SourceCodester Online Book Store System 1.0, involving uncontrolled file inclusion (Local File Inclusion) in /admin/index.php. By manipulating the 'page' argument, an attacker can remotely include arbitrary PHP files, leading to unauthorized data access or code execution.

A vulnerability in SourceCodester Online Book Store System 1.0 allows unrestricted file upload via the book image upload feature in /admin/index.php?page=books. This can lead to remote code execution. The exploit is publicly available.

A weakness has been identified in PrimeReact (primefaces primereact) up to 10.9.8. The issue affects the function ObjectUtils.mutateFieldData in components/lib/utils/ObjectUtils.js. Manipulation of the argument Field causes improperly controlled modification of object prototype attributes. The attack can be carried out remotely. Upgrading to version 10.9.9 or 11.0.0 addresses this issue.

A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in the file /patviewprescription.php. Manipulation of the delid argument allows an attacker to inject malicious SQL code. The attack can be performed remotely and the exploit is publicly available.

The WP Job Portal WordPress plugin before version 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to read other employers' private account email addresses by enumerating job identifiers.