CVE Vulnerability Catalog

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface. Authenticated attackers can inject malicious scripts by manipulating the s_emotion parameter. The script executes when administrators view the smilies tab.

WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text field in payment forms. Attackers can inject malicious HTML including image tags and scripts into the Help Text field during payment form creation, which gets stored in the database and executed in the browser when the form is viewed.

Stored XSS in Projectsend r1295. Authenticated attackers can inject malicious script via the 'name' parameter in files-edit.php, which executes for administrators on the Dashboard.

OpenCart 3.0.3.6 has a cross-site request forgery vulnerability in the /account/edit endpoint, allowing unauthenticated attackers to modify victim account details by tricking users into visiting malicious pages. Attackers can change email addresses and use password reset to take over accounts.

Exponent CMS 2.6 contains a stored XSS vulnerability that allows authenticated attackers to inject malicious scripts via the Title and Text Block parameters in the text editing endpoint. Attackers can inject iframe payloads with embedded SVG onload events to execute arbitrary JavaScript. The application also exposes database credentials in responses and lacks brute-force protection on authentication endpoints.

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.

WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insufficient sanitization of the forum name parameter. Attackers can submit POST requests to the admin setup page with JavaScript payloads in the wps_admin_forum_add_name parameter, which are stored and executed when the forum is accessed.

Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating forms with script tags in the form name field. Attackers can craft form names containing JavaScript code that executes when other logged-in users access the form management page, enabling session hijacking or credential theft.

CMDBuild 3.3.2 contains multiple stored XSS vulnerabilities allowing authenticated attackers to inject arbitrary HTML/JavaScript via employee card parameters or SVG attachments in class endpoints. Scripts execute when other users view modified records or preview attachments.

Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject malicious scripts via the price parameter by submitting POST requests to post.php with HTML/JavaScript payloads, executing arbitrary code when the product is viewed.

Slider by Soliloquy 2.6.2 contains a stored XSS vulnerability allowing authenticated attackers to inject malicious scripts via the title parameter. Scripts execute in browsers of users viewing the slider on both admin and frontend pages.

AccessPress Social Icons 1.8.2 contains a stored XSS vulnerability allowing authenticated attackers to inject malicious scripts via the 'icon title' field. Scripts execute when the plugin page is viewed, affecting all users.

Rocket LMS 1.1 contains a persistent XSS vulnerability in the support ticket module allowing authenticated users to inject malicious script code via the title parameter. Scripts execute in browsers of other users viewing message history, enabling session hijacking and phishing attacks.

Vulnerability in IAS Canias ERP 8.03 in the Login RMI Interface component, where manipulation of the clientVersion argument leads to improper authentication. Remote attack possible, exploit publicly available.

A vulnerability was found in IAS Canias ERP 8.03 in the JNLP Deployment Endpoint component. An unknown function allows remote exploitation of a hard-coded cryptographic key. The vendor did not respond.

In IAS Canias ERP 8.03, the iasGetServerInfoEvent function in the RMI Interface component allows remote manipulation leading to improper authorization. The exploit has been publicly disclosed.

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. The function resolveSkillScriptPath in src/kernel.ts of the System Command Handler component allows OS command injection. The exploit is publicly available.

A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The vendor was contacted early about this disclosure.

SQL Injection vulnerability in CodeAstro Online Catering Ordering System 1.0. Manipulation of the ID argument in /deleteorder.php allows remote SQL injection.

An OS command injection vulnerability was found in Wavlink NU516U1 240425 in the sys_login1 function of /cgi-bin/login.cgi. Manipulating the ipaddr argument allows remote command execution. The exploit has been published.